CVE-2023-37424

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...

PT-2023-5854 · Supermicro · Supermicro X11Sse-F +1

Name of the Vulnerable Software and Affected Versions: Supermicro X11SSM-F version 1.66 Supermicro X11SAE-F version 1.66 Supermicro X11SSE-F version 1.66 Description: An issue was discovered in the web interface of Supermicro X11 series devices, specifically X11SSM-F, X11SAE-F, and X11SSE-F, due ...

Juniper Networks Junos OS EX 访问控制错误漏洞

Juniper Networks Junos OS EX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS EX is vulnerable to an access control error vulnerability that arises from the...

CVE-2023-20242

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified CM Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to...

PT-2023-4507 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access sensitive...

PT-2023-4433 · Cisco · Cisco Evolved Programmable Network Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remo...

CVE-2023-4345

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user...

Broadcom RAID Controller Security Vulnerability

The Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation USA. A security vulnerability exists in the Broadcom RAID Controller that stems from a lack of HTTP strict-transport-security policy in the web interface, which makes the product vulnerable to attack...

Broadcom RAID Controller 安全漏洞

The Broadcom RAID Controller is a series of RAID controllers from Broadcom Corporation USA. A security vulnerability exists in the Broadcom RAID Controller, which stems from a known vulnerability in the web interface's use of Libcurl with LSA, which makes the product susceptible to attack...

PT-2023-28821 · Broadcom · Broadcom Raid Controller

Name of the Vulnerable Software and Affected Versions: Broadcom RAID Controller affected versions not specified Description: The Broadcom RAID Controller web interface is vulnerable due to insecure defaults, specifically the lack of an HTTP strict-transport-security policy. This issue can be...

The vulnerability in the web interface for controlling microprogrammed IP phones of the Cisco Small Business SPA500 series allows attackers to perform cross-site scripting attacks.

The vulnerability of the web interface for managing microprogrammed IP telephone systems from Cisco’s Small Business SPA500 series is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of measures to neutralize special elements used in the operating system’s processing of the...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to perform cross-site scripting attacks.

The vulnerability of the web interface of microprogramming software for routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remot...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows attackers to perform cross-site scripting attacks.

The vulnerability of the web interface of microprogramming software for routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 stems from the lack of measures taken to protect the structure of the web page during the processing of parameter...

The vulnerability in the software web interface for Cisco Webex Meetings allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of Cisco Webex Meetings software’s web interface is related to the lack of measures taken to protect the website structure during the processing of Webex Events classic applications. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks a...

PT-2023-5482 · Advantech · Eki-1522 +2

Name of the Vulnerable Software and Affected Versions: Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 Description: The issue is related to a Stored Cross-Site Scripting vulnerability. This vulnerability can be triggered by authenticated users in the ping tool of the web-interface. Th...

CVE-2023-20133

A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events class...

VulnCheck KEV: CVE-2018-20122

The web interface on FASTGate Fastweb devices with firmware through 0.00.47FW200Askey 2017-05-17 software through 1.0.1b exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320 and RV325 allows a hacker to execute arbitrary commands on the device.

The vulnerability of the web-based management interfaces for Cisco Small Business RV320 and RV325 routers is related to insufficient verification of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the root user in the...

The vulnerability in the web interface of the Cisco Operating System, Cisco AsyncOS, affects the Cisco Email Security Appliance (ESA) and the Cisco Secure Web Appliance (previously Cisco Web Security Appliance). This vulnerability allows attackers to carry out attacks using XSS scripts across different websites.

The vulnerability in the web interface of the Cisco Operating System, Cisco Email Security Appliance, and Cisco Secure Web Appliance previously Cisco Web Security Appliance exists due to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious act...