288 matches found
VulnCheck KEV: CVE-2023-46805
Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in...
CVE-2023-49030
SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component...
Sql injection
SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component...
PT-2023-6898 · D Link · D-Link Dar-7000
Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 version V31R02B1413C Description: The issue is related to a SQL injection vulnerability in the editrole.php component, which can be exploited by a remote attacker to obtain sensitive information and execute arbitrary code. Thi...
Exploit for PHP External Variable Modification in Juniper Junos
CVE-2023-36845 PoC Automation Script This script provides an...
Synology Router Manager 信息泄露漏洞
Synology Router Manager SRM is a software used to configure and manage Synology routers from Synology Inc. in China. An information disclosure vulnerability exists in Synology Router Manager versions prior to 1.3 1.3.1-9346-6, which originates from the exposure of sensitive information in the cgi...
Avaya Aura Device Services 代码问题漏洞
Avaya Aura Device Services is a software application from Avaya, Inc. It provides a feature for managing Avaya endpoints. A security vulnerability exists in Avaya Aura Device Services Web that stems from the presence of a command injection vulnerability. An attacker could exploit the vulnerabilit...
CVE-2023-37758
D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...
CVE-2023-37758
D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...
Juniper Junos OS Multiple Vulnerabilities (JSA70587)
The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA70587 advisory. - An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based...
CVE-2023-28963
An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...
CVE-2023-28962
An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...
Juniper Networks Junos OS 授权问题漏洞
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An authorization issue vulnerability exists in Juniper Networks Junos OS, which is caused by improper authentication in th...
CVE-2023-28962 Junos OS: Unauthenticated access vulnerability in J-Web
An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...
CVE-2023-28963 Junos OS: User-controlled input vulnerability in J-Web
An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...
CVE-2023-28963 Junos OS: User-controlled input vulnerability in J-Web
An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...
Malicious code in lime-web-component-interfaces (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94eb9bf47469857d8b3e3da68a34e320a0c7b1129a7b260fafe36dea5396cc0c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...
MAL-2023-1227 Malicious code in lime-web-component-interfaces (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94eb9bf47469857d8b3e3da68a34e320a0c7b1129a7b260fafe36dea5396cc0c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...
Design/Logic Flaw
A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies...