1290 matches found
Teradek Sphere 跨站脚本漏洞
Teradek Sphere is a real-time monitoring and streaming solution from Teradek. A security vulnerability exists in Teradek Sphere. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...
CVE-2021-37379
Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...
CVE-2021-37379
Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...
PT-2023-12316 · Teradek · Teradek Sphere
Name of the Vulnerable Software and Affected Versions: Teradek Sphere all firmware versions Description: The issue allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. This is a Cross Site Scripting XSS issue. The vendor states that the product...
CVE-2021-37379: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Friendly Name field in System Information Settings. NOTE: Vedor states the product has reached End of Life and will not be receiving any firmware updates to address...
CVE-2021-37379
CVE-2021-37379 is a Cross Site Scripting (XSS) vulnerability affecting Teradek Sphere across all firmware versions. The issue allows remote attackers to execute arbitrary code via the Friendly Name field in System Information Settings. The public descriptions consistently note that Teradek Sphere...
CVE-2022-34458
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the...
Design/Logic Flaw
Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the...
CVE-2022-22732
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources data supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission Versions pri...
Design/Logic Flaw
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources data supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission Versions pri...
CVE-2022-22732: Exposure of Resource to Wrong Sphere
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the resources data supplied by the server when an attacker sends a fetch request from third-party site or malicious site. Affected Products: EcoStruxure Power Commission Versions pri...
avto-sphere.ru Open Redirect vulnerability OBB-3161012
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GPAC 输入验证错误漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.2-rev0-gab012bbfb-master, which stems from the discovery of a contained integer overflow vulnerability via the QDecCoordOnUnitSphere function in bifs/unquantize.c...
sphere.health Cross Site Scripting vulnerability OBB-3108831
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-46996
vSphereselfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
CVE-2022-45269
A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attackers to read arbitrary files...
CVE-2022-45269
A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attackers to read arbitrary files...
Directory traversal
A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attackers to read arbitrary files...
GMAO LINX LINX Sphere 路径遍历漏洞
GMAO LINX LINX Sphere is a software from GMAO LINX designed for the overall management of industrial and construction grade maintenance departments. A security vulnerability exists in GMAO LINX LINX Sphere version 7.35.ST15, which stems from a directory traversal in the component...