417 matches found
CVE-2022-0386
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute code in Sophos UTM before version 9.710...
WordPress plugin ARS Affiliate Page Plugin 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
CVE-2024-39340
The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has...
CVE-2024-39340
The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has...
CVE-2024-39340
The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include UTM 11.5 through 12.6.4 and Reseller Preview 12.7.0. The issue has...
CVE-2024-39340
CVE-2024-39340 affects Securepoint UTM and related products. The authenticated OTP mechanism mishandles OTP keys, allowing bypass of second-factor verification when OTP is enabled in both the administration web interface and the user portal. Affected versions include Securepoint UTM 11.5 through ...
PT-2024-5353 · Securepoint · Securepoint Utm
Name of the Vulnerable Software and Affected Versions: Securepoint UTM versions 11.5 through 12.6.4 Securepoint UTM Reseller Preview version 12.7.0 Description: The issue is related to the authentication system of Securepoint UTM, specifically with the handling of One-Time Password OTP keys. This...
VulnCheck KEV: CVE-2023-22620
An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to the administrative interface...
CVE-2023-36831
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...
CVE-2023-36831
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...
Input validation
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...
CVE-2023-36831 Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...
CVE-2023-36831 Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied
An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...
CVE-2023-36831
CVE-2023-36831 affects Juniper Networks Junos OS SRX Series. The jbuf memory leak occurs when SSL Proxy and UTM Web-Filtering are enabled, leading to a DoS with service restoration only via reboot. Affected versions are: 22.2 before 22.2R3; 22.3 before 22.3R2-S1, 22.3R3; 22.4 before 22.4R1-S2, 22...
Juniper Networks Junos OS SRX 安全漏洞
Juniper Networks Junos OS SRX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS SRX that originates from a check or...
CVE-2023-23822
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...
CVE-2023-23822
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...
CVE-2023-23822 WordPress UTM Tracker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...
CVE-2023-23822 WordPress UTM Tracker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ludwig Media UTM Tracker plugin = 1.3.1 versions...