19931 matches found
UserGate NGFW Management Center Log Analyzer SIEM Injection
The vulnerability in the web-based interface of the UserGate Next-Generation Firewall NGFW, the unified management center UserGate Management Center UGMC, and the log collection system UserGate Log Analyzer LogAn is related to insufficient validation of input data. Exploiting this vulnerability...
PT-2025-20278 · Cisco · Cisco Catalyst Sd-Wan Manager
Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager affected versions not specified Description: A vulnerability in the web interface could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This issue is due to...
Cisco IOS XE Operating System Command Injection Vulnerability
Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in the Cisco IOS XE Software web interface, which can be exploited by a remote attacker to submit a special request that can execute arbitrary command...
Retrieval-based-Voice-Conversion-WebUI code issues and vulnerabilities
Retrieval-based-Voice-Conversion-WebUI is an open source voice training modeling tool from RVC-Project. A code issue vulnerability exists in Retrieval-based-Voice-Conversion-WebUI version 2.2.231006 and earlier, which stems from improper handling of the ckpta and cpktb variables, and could lead t...
CVE-2024-41753
IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF004 and 24.0.1 through 24.0.1 IF001 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2024-47784 Unverified Password Change
Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI This issue affects ANC software version 1.1.4 and earlier...
Bosch Rexroth ctrlX OS security vulnerabilities
Bosch Rexroth ctrlX OS is a Linux-based real-time operating system from Bosch Rexroth, Germany, designed as an open control platform for industrial automation equipment. A security vulnerability exists in Bosch Rexroth ctrlX OS that originates from a specially crafted HTTP request in the web...
Cisco AsyncOS Account Management Unauthorized Access
The vulnerability of the web interface of the Cisco AsyncOS operating system’s account management system relates to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
AvertX network IP camera web interface video stream access
The vulnerability of the web interface of the AvertX network IP camera’s microprogramming software is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a remote attacker to gain access to the video stream...
PT-2025-41789
Уязвимость веб-интерфейса веб-сервера ЭЛАРА Эликонт-КС связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
CVE-2025-2771
BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
Tenda FH1202 Privilege Escalation
The vulnerability of the web-based management interface for Tenda FH1202 micro-programmed routing software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by sending specially crafted POST requests...
CVE-2025-25427
A stored cross-site scripting XSS vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/v14.8 = Build 241230 Rel. 50788n allows remote attackers to inject arbitrary JavaScript code via the port mapping description. This leads to an execution of the JavaScript payload...
CVE-2024-6198
The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could u...
CVE-2024-6198
The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could u...
CVE-2024-6198
The CVE-2024-6198 entry concerns Viasat modems exposing a web interface on ports 3030 and 9882, served by lighttpd implementing the SNORE interface. The vulnerability is a stack buffer overflow caused by insecure path parsing, exploitable by a specially crafted HTTP request from a LAN network int...
CVE-2025-2986
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
Quantum StorNext Web GUI API code-related vulnerabilities
The Quantum StorNext Web GUI API is a high-performance file sharing and data management interface from Quantum. A security vulnerability exists in the Quantum StorNext Web GUI API prior to version 7.2.4 that stems from a file upload that could lead to arbitrary remote code execution...
PT-2025-17902 · Viasat +1 · Viasat Modems +1
Name of the Vulnerable Software and Affected Versions: Viasat modems affected versions not specified Description: The device exposes a web interface on ports TCP/3030 and TCP/9882, running lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow...
