29 matches found
EUVD-2016-10359
Malware in sbrugna...
EUVD-2017-17192
Malware in sbrugna...
EUVD-2016-10360
Malware in sbrugna...
CVE-2021-35336
Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account...
CVE-2021-35336: Initialization of a Resource with an Insecure Default
Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account...
PT-2021-20891
Name of the Vulnerable Software and Affected Versions: Tieline IP Audio Gateway versions 2.6.4.8 and below Description: The issue concerns Incorrect Access Control in the Tieline Web Administrative Interface, allowing an unauthenticated user to access sensitive parts of the system with a...
Tieline IP Audio Gateway 访问控制错误漏洞
IP Audio Gateway is an audio codec from Tieline. An access control error vulnerability exists in Tieline IP Audio Gateway, which stems from a vulnerability in the Tieline Web Administrative Interface that could allow an unauthenticated user with a highly privileged account to access sensitive par...
CVE-2020-35338
The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server 20.2.8 and earlier has a default account with a password of "pokon."...
CVE-2020-35338
CVE-2020-35338 affects Wireless Multiplex Terminal Playout Server
CVE-2020-35338: Use of Hard-coded Credentials
The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server 20.2.8 and earlier has a default account with a password of "pokon."...
Cross site request forgery (csrf)
Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface...
CVE-2018-7060
CVE-2018-7060 concerns Aruba ClearPass CSRF on authenticated users. Connected sources (NVD/CNVD) confirm: affected products are Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1. The vulnerability enables CSRF attacks that could cause an authenticated user to perform actions on the we...
CVE-2018-7060: Cross-Site Request Forgery (CSRF)
Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface...
Dell SonicWall Secure Remote Access Multiple Command Injection Vulnerabilities
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...
CVE-2016-9683
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...
CVE-2016-9682
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...
Command injection
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'extensionsettings' CGI /cgi-bin/extensionsettings component responsible for handling some of the server's...
CVE-2016-9684
Dell SonicWALL Secure Remote Access (SRA) server, version 8.1.0.2-14sv, is vulnerable to a remote command injection in the web admin CGI at /cgi-bin/viewcert. The CGI does not properly escape the CERT input before a system() call, enabling an attacker to execute arbitrary shell commands and gain ...
CVE-2016-9684: Improper Neutralization of Special Elements used in a Command
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the 'viewcert' CGI /cgi-bin/viewcert component responsible for processing SSL certificate information. The CGI...
PT-2017-10203
Name of the Vulnerable Software and Affected Versions Sophos Web Appliance Remote / Secure Web Gateway version 4.2.1.3 Description The issue arises from a Remote Command Injection vulnerability in the web administrative interface, specifically in the MgrDiagnosticTools.php component. This...