19979 matches found
Cisco Secure Firewall Management Center XSS
The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow attackers to execute cross-site scripting...
Cisco Secure Firewall Management Center SQL Injection
The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remote...
Cisco Small Business RV042 Router Code Execution
The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...
DrayTek Vigor Routing XSS
The vulnerability of the wlogin.cgi web interface script of the DrayTek Vigor router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
DrayTek Vigor Router ft_payloads_dns DNS Failure
The vulnerability of the ftpayloadsdns function in the web interface of the DrayTek Vigor router software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Cisco Firepower Management Center XSS
The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
Splunk Web XSS
The vulnerability of the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...
Xerox Printers Authenticated Remote Code Execution Vulnerability
Various Xerox printers, such as models EC80xx, AltaLink, VersaLink, and WorkCentre, suffer from an authenticated remote code execution vulnerability. ======================================================================= title: Authenticated Remote Code Execution product: Multiple Xerox printers...
PT-2024-10219 · Schneider Electric · Powerlogic Hdpm6000
Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic HDPM6000 versions up to 0.62.7 Description: The issue is related to an Improper Restriction of Operations within the Bounds of a Memory Buffer, which could allow an unauthorized attacker to modify configuration...
PT-2024-29297
Name of the Vulnerable Software and Affected Versions TRO600 series radios affected versions not specified Description A command injection issue in the Edge Computing UI allows an attacker with write access to the web UI to execute arbitrary system commands on the device with root privileges. Thi...
LoLLMs Cross-Site Request Forgery Vulnerability
LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A cross-site request forgery vulnerability exists in LoLLMs version v9.9, which stems from the presence of a cross-site request forgery CSRF vulnerability that allows an attacker to trick a...
Cisco Analog Telephone Adapter Web Interface Configuration Change
The vulnerability of the web interface for managing microprogrammed software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to the bypassing of authentication due to a root cause. Exploiting this vulnerability allows an attacker to make limited changes to the...
Cisco ATA Series 190 Configuration Access
The vulnerability of the web interface for managing microprogramming software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to view or delete configurations, or modify firmware using...
Cisco Analog Telephone Adapter Arbitrary Command Execution
The vulnerability in the web interface for managing microprogrammed software devices of Cisco Analog Telephone Adapter ATA series 190 exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious act...
Cisco ATA Series 190 Password Disclosure
The vulnerability in the web interface for managing microprogrammed software devices of Cisco Analog Telephone Adapter ATA series 190 involves the storage of passwords in a recoverable format. Exploiting this vulnerability allows an attacker to view the passwords of arbitrary users...
Cisco ATA Series 190 CSRF
The vulnerability in the web interface for managing microprogramming software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack and perform arbitrar...
Cisco Analog Telephone Adapter Device Command Execution
The vulnerability of the web interface for managing microprogrammed software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute commands on behalf of the Admin user by sending a...
Cisco Firepower Management Center XSS
The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
PT-2024-16332 · Apc · Powerchute Serial Shutdown
Name of the Vulnerable Software and Affected Versions: PowerChute Serial Shutdown affected versions not specified Description: The issue is related to an improper authentication vulnerability that could cause denial of access to the web interface when someone on the local network repeatedly...
Security Bulletin: Multiple vulnerabilities in XCC affect Cloud Pak System
Summary Multiple Vulnerabilities in XClarity Controller XCC affect IBM Cloud Pak System. XCC is used by Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2024-38510 DESCRIPTION: Lenovo XClarity Controller XCC could allow a remote...