Vulnerabilities fixed in Cobbler

The Cobbler project has fixed two vulnerabilities. A local malicious party can exploit the vulnerabilities to view configuration files or locally execute arbitrary code execute arbitrary code under the application's permissions. A third vulnerability was also found, CVE-2021-45081. There are...

Huawei E5756S Authentication Bypass Vulnerability

The Huawei E5756S is a Unicom 3G Internet card device from Huawei China. A security vulnerability exists in the Huawei E5756S V100R001B100D00SP00C00 version, which stems from an imperfect WebUI interface authentication mechanism. The vulnerability can be exploited by a remote attacker to view the...

CVE-2017-6772

A vulnerability in Cisco Elastic Services Controller ESC could allow an authenticated, remote attacker to view sensitive information. The vulnerability is due to insufficient protection of sensitive data. An attacker could exploit this vulnerability by authenticating to the application and...

CVE-2013-1887

Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...

CVE-2013-1887

Removed by vendor...