15772 matches found
PT-2024-32616 · Ae1021Pe +1 · Ae1021Pe +1
Name of the Vulnerable Software and Affected Versions: AE1021 versions 2.0.10 and earlier AE1021PE versions 2.0.10 and earlier Description: A weak authentication issue exists, allowing the authentication to be bypassed with an undocumented specific string if the vulnerability is exploited...
PT-2024-17592 · WordPress · Wpc Shop As A Customer For Woocommerce
Name of the Vulnerable Software and Affected Versions: WPC Shop as a Customer for WooCommerce plugin for WordPress versions prior to 1.2.9 Description: The issue affects the WPC Shop as a Customer for WooCommerce plugin for WordPress, allowing account takeover and privilege escalation. This is du...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the MQTT operating system broker of Ruijie Reyee OS allows a hacker to expose user credentials.
The vulnerability of the MQTT broker operating system in Ruijie Reyee OS is related to the use of weak credentials. Exploiting this vulnerability can allow a malicious actor to obtain access to the credentials...
PHPGurukul Online Birth Certificate System 安全漏洞
Online Birth Certificate System is an online birth certificate system. An unauthorized access vulnerability exists in the Online Birth Certificate System that stems from inadequate password requirements and can be exploited by an attacker to gain unauthorized access to a user's account...
BIT-NODE-MIN-2022-35255
A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource in SecretKeyGenTraits::DoKeyGen in src/crypto/cryptokeygen.cc. There are two problems with this: 1 It does not check the return value, it assumes EntropySource always succeeds, but it can a...
Multiple vulnerabilities in FXC AE1021 and AE1021PE
Overview AE1021 and AE1021PE are information outlet type wireless LAN routers provided by FXC Inc. They contain multiple vulnerabilities listed below. Weak Authentication CWE-1390 - CVE-2024-47397 OS Command Injection CWE-78 - CVE-2024-53688 Inclusion of Undocumented Features CWE-1242 -...
The vulnerability of the remote management interface of the Veeam Backup & Replication software for cloud, virtual, and physical systems allows a perpetrator to disclose protected information.
The vulnerability of the remote management interface of the Veeam Backup & Replication software for cloud, virtual, and physical systems is related to insufficient protection of registration data. Exploiting these vulnerabilities could allow a malicious actor to disclose the protected information...
CVE-2023-41862
Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0...
CVE-2023-41862 WordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability
Weak Authentication vulnerability in Guido VS Contact Form very-simple-contact-form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through = 14.0...
CVE-2023-41862 WordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability
Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0...
WordPress plugin VS Contact Form 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin VS Contact For...
The vulnerability of the SYNO.SurveillanceStation.ActionRule interface of the surveillance application, which allows a intruder to increase their privileges
The vulnerability of the SYNO.SurveillanceStation.ActionRule interface of the surveillance organization application is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...
Weak Password Enforcement
ethycafides is vulnerable to Weak Password Enforcement. The vulnerability is due to a lack of server-side password policy enforcement in the /api/v1/user/accept-invite endpoint, allowing users to bypass client-side password complexity checks...
The Naumen Service Management Platform’s vulnerability regarding automation of business processes arises from insufficient filtering of input data and lack of measures to protect the structure of web pages. This allows attackers to carry out XSS attacks.
The Naumen Service Management Platform is vulnerable to automation of business processes due to insufficient filtering of input data and lack of measures to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by loading a specially...
php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
A vulnerability was found in PHP where the weak randomness affects applications that use SOAP with HTTP Digest authentication against a possibly malicious server over HTTP allows a remote authenticated attackers to cause a stack information leak...
VulnCheck KEV: CVE-2024-55550
Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated,...
The vulnerability in the web interface of the SOLDR threat detection and analysis system allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the SOLDR threat detection and analysis web interface exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS by injecting malicious JavaScript code...
CVE-2024-50699
The CVE-2024-50699 issue affects TP-Link TL-WR845N(UN)_V4 devices (versions 190219–201214, including 200909) due to weak default Administrator credentials, enabling unauthorized admin access. Root cause: weak default credentials on the Administrator account. Impact: high confidentiality, integrit...