The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 allows a attacker to perform a DNS Rebinding attack.

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 router is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to carry out a DNS Rebinding attack remotely...

PT-2020-9990 · Jinan Usr Iot · Usr-Wifi232-S/T/G2/H Low Power Wifi Module

Name of the Vulnerable Software and Affected Versions: Jinan USR IOT USR-WIFI232-S/T/G2/H Low Power WiFi Module version 1.2.2 Description: A cross-site scripting XSS issue in the configuration web interface allows attackers to leak credentials of the Wi-Fi access point and the web interface login...

The vulnerability of the web interface of the Cisco Stealthwatch Enterprise threat detection and analysis system allows a perpetrator to execute a cross-site scripting attack.

The vulnerability of the Cisco Stealthwatch Enterprise threat detection and analysis web interface is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a specially crafted...

The vulnerability in the web interface of the Cisco Industrial Network Director software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Cisco Industrial Network Director software’s web interface is related to the lack of protective measures taken for the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created web...

CVE-2019-13943

A vulnerability has been identified in EN100 Ethernet module DNP3 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.37, EN100 Ethernet module IEC104 variant All versions, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO variant A...

CVE-2019-13930

A vulnerability has been identified in XHQ All versions V6.0.0.2. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be...

The vulnerability of the Cisco Wireless LAN Controller web interface allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Wireless LAN Controller web interface is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Identity Services Engine ISE network policy management web interface is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by...

The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to carry out a cross-site scripting attack or gain unauthorized access to protected information.

The vulnerability of the web interface of Cisco Firepower Management Center FMC software lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks or gain unauthorized access to protected...

Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability

Cisco Stealthwatch Enterprise is a set of enterprise network security protection solutions from the U.S. company Cisco Cisco. The product has security event analysis, network segmentation management and data protection features. A cross-site scripting vulnerability exists in the Web management...

Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CNVD-2020-00295)

Cisco Prime Infrastructure Software is the United States Cisco Cisco company's set of basic network lifecycle management solutions. The product integrates Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS. A cross-site scripting vulnerability exists in the web-bas...

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Unified Communications Manager IM and Presence Service, and the integrated messaging system Unity Connection allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Unified Communications Manager IM and Presence Service, and the integrated messaging system Unity Connection exists due to the lack of security measures taken to protect the w...

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability of the Web interface for Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

The vulnerability in the web interface for controlling microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to access confidential information.

The vulnerability in the web interface for managing microprogrammed IP telephone devices of the Cisco SPA100 series is related to the insecure processing of user credentials. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability in the web interface for managing Cisco Prime Infrastructure network equipment is related to insufficient verification of the data entered by users in several sections of the web interface. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain...

The vulnerability in the web interface of Cisco Expressway micro-program software and the Cisco TelePresence Video Communication Server control devices allows a perpetrator to execute arbitrary code or access confidential information.

The vulnerability of the web interface for managing microprogramming software on Cisco Expressway and the Cisco TelePresence Video Communication Server exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the Web-GUI component of the microprogramming software for WAGO Series 750-88x and WAGO Series 750-87x allows a hacker to alter the settings.

The vulnerability of the Web-GUI component of the microprogramming software for WAGO Series 750-88x and WAGO Series 750-87x exists due to the rigid coding of registration data. Exploiting this vulnerability could allow a malicious actor to remotely alter settings...

IBM QRadar SIEM Cross-Site Scripting Vulnerability (CNVD-2019-41416)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A cross-site...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2019-39757)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server, which can be exploited by...

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to execute arbitrary code with elevated privileges.

The vulnerability in the web interface for managing Microprogramming software in Cisco SPA100 Series IP phones is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges using a...