21177 matches found
CVE-2025-6111
A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7775. This vulnerability affects the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has bee...
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server system, related to deficiencies in the testing mechanism for integrations, allows a hacker to disclose protected information.
The vulnerability of the “Termide Virtual Desktops Connection Manager” software suite is related to deficiencies in the testing mechanisms for integrations. Exploiting this vulnerability allows a malicious actor to disclose sensitive information...
The vulnerability in the web interface of the “Termide Virtual Desktops Connection Manager” software allows a attacker to perform XSS attacks.
The vulnerability of the software interface “Termide Virtual Desktops Connection Manager” is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to execute attacks by bypassing the specified path.
The vulnerability of the "Termide Virtual Desktops Connection Manager" software server is related to an incorrect limitation on the path to the restricted access catalog. Exploitation of this vulnerability allows a malicious actor to perform attacks by bypassing the specified path...
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent arises from the lack of protective measures for the request structure, allowing attackers to enhance their privileges.
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using specially crafted authorized HTTP requests...
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent arises from the lack of protective measures for the request structure, allowing a perpetrator to execute arbitrary code.
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server, related to an authentication error, allows unauthorized access to user domain accounts.
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server is related to an authentication error based on the Kerberos protocol. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to user account credentials...
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server arises from an improper limitation on the path name to the restricted access catalog, allowing a perpetrator to gain access to any file in the file system.
The vulnerability of the “Termide Virtual Desktops Connection Manager” software complex is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to any file in the file system by...
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server, related to errors in user permission separation, allows a perpetrator to execute arbitrary commands.
The vulnerability of the “Termide Virtual Desktops Connection Manager” software suite is related to errors in user permission allocation. Exploiting this vulnerability allows a malicious actor to remotely execute commands like qemu-monitor...
TencentOS Server 4: python3.11 (TSSA-2024:0758)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0758 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server arises from improper processing of X-Forwarded-For HTTP requests, allowing attackers to bypass authentication procedures.
The vulnerability of the “Termide Virtual Desktops Connection Manager” software server is related to the improper processing of X-Forwarded-For HTTP requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures remotely...
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent arises from the lack of protective measures for the request structure, allowing a perpetrator to execute arbitrary code.
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent, which stems from the failure to implement protective measures for the request structure, allows attackers to enhance their privileges.
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability can allow attackers to enhance their privileges by using specially crafted authorized HTTP requests...
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent, which stems from insufficient verification of data authenticity, allows a perpetrator to specify a path to an arbitrary file.
The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to specify a path to an alternative executable file...
The vulnerability in the web-based interfaces of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager allows a perpetrator to execute arbitrary commands.
The vulnerability of the Web interface for managing Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager systems relates to incorrect elimination of certain elements in the output data. Exploiting this vulnerability could allow a malicious actor to execute...
The vulnerability of the components of the Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager, which are used in network traffic analysis, network detection, and response systems, allows attackers to compromise the integrity of protected information.
The vulnerability of the API components of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager relates to improper authentication. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
Telex Remote Dispatch Console Server和RTS VLink Virtual Matrix Software 安全漏洞
Telex Remote Dispatch Console Server is a scalable communication system from Telex Corporation, U.S.A. RTS VLink Virtual Matrix Software is a software solution for RTS matrix intercom systems from RTS Corporation, U.S.A. The vulnerability is due to a security flaw in Telex Remote Dispatch Console...
AVEVA PI Web API
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to disable content security policy protections. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...
AVEVA PI Connector for CygNet
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to persist arbitrary code in the administrative portal of the product or cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
