15803 matches found
Palo Alto Networks PAN-OS 10.1.x < 10.1.12 / 10.2.x < 10.2.8 / 11.0.x < 11.0.4 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.12 or 10.2.x prior to 10.2.8 or 11.0.x prior to 11.0.4. It is, therefore, affected by a vulnerability. - A weak low bit strength device certificate in Palo Alto Networks Panorama software enables an attack...
PT-2024-18312 · WordPress · Forminator
Name of the Vulnerable Software and Affected Versions: Forminator plugin for WordPress versions up to and including 1.29.0 Description: The issue is related to Stored Cross-Site Scripting via an uploaded file, such as a 3gpp file, due to insufficient input sanitization and output escaping. This...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
Use of a Weak PseudoRandom Number Generator in EDK II Network Package
...
Unify CP IP Phone 安全漏洞
Unify CP IP Phone is a phone from Unify Germany. A security vulnerability exists in Unify CP IP Phone version 1.10.4.3, which stems from the use of weak credentials...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
The vulnerability in the accessibility components of iOS and iPadOS operating systems allows attackers to gain access to the user’s location.
The vulnerability of the Accessibility component in iOS and iPadOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain access to the user’s location...
The vulnerability of the log management page (journals) of the web application of the command-and-control platform for NorthStar C2 penetration testing allows a attacker to execute arbitrary code.
The vulnerability of the log management page journal of the command-and-control platform-based web application for NorthStar C2 exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2024-22247 · Unify · Unify Cp Ip Phone
Name of the Vulnerable Software and Affected Versions: Unify CP IP Phone version 1.10.4.3 Description: The issue is related to weak credentials, specifically a hardcoded root password, in the firmware. Recommendations: For Unify CP IP Phone version 1.10.4.3, consider changing the hardcoded root...
CVE-2024-28066
In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...
The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of micro-programmed quadrocopters’ software, such as DJI Mavic 3 Pro, DJI Mavic 3, DJI Mavic 3 Classic, DJI Mavic 3 Enterprise, DJI Matrice 300, DJI Matrice M30, DJI Mavic Mini 3 Pro, is related to the use of weak credentials. This allows a intruder to gain access to the device.
The vulnerability of microprogrammed software in DJI’s Mavic 3 Pro, Mavic 3, Mavic 3 Classic, Mavic 3 Enterprise, Matrice 300, Matrice M30, and Mavic Mini 3 Pro drones is related to the use of weak authentication credentials. Exploiting this vulnerability can allow a remote attacker to gain acces...
Multiple vulnerabilities in NEC Aterm series
Overview Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. Incorrect Permission Assignment for Critical Resource CWE-732 - CVE-2024-28005 Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497 - CVE-2024-28006 Incorrect Permission...
PT-2024-21352 · Chilkat · Chilkat
Name of the Vulnerable Software and Affected Versions: Chilkat versions prior to 9.5.0.98 Description: The issue allows attackers to obtain sensitive information via a predictable PRNG in the ChilkatRand::randomBytes function. Recommendations: For versions prior to 9.5.0.98, update to version...
JVN#82074338: Multiple vulnerabilities in NEC Aterm series
Aterm series provided by NEC Corporation contains multiple vulnerabilities listed below. Incorrect Permission Assignment for Critical Resource CWE-732 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 8.0 CVE-2024-28005 Exposure of Sensitive System Information to an Unauthorized Control...
PT-2024-23607 · Unknown · Ros Kinetic Kame
Name of the Vulnerable Software and Affected Versions: ROS Kinetic Kame affected versions not specified Description: The issue is related to an arbitrary file upload vulnerability due to insufficient file upload validation. Recommendations: At the moment, there is no information about a newer...
Nextcloud: Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.com
Security researchers discovered a vulnerability in the Secure Shell SSH cryptographic network protocol, known as Terrapin CVE-2023-48795. This vulnerability could have allowed an attacker to downgrade the security of the secure channel. Weak SSH algorithms were also identified on various subdomai...
The vulnerability in the web interface of the Cisco Catalyst Center (formerly Cisco DNA Center) allows a attacker to access and modify data.
The vulnerability of the web-based interface of the Cisco Catalyst Center formerly Cisco DNA Center is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and modify data by sending a specially crafted HTTP request...