Lucene search
+L

17349 matches found

CNNVD
CNNVD
added 2024/02/27 12:00 a.m.12 views

Aruba Networks ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that stems from a web-based management interface that allows a remote attacker...

4.8CVSS6.6AI score0.00354EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.10 views

Aruba Networks ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that stems from a web-based management interface that allows an authenticated...

8.8CVSS7.4AI score0.00924EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/27 12:00 a.m.10 views

PT-2024-21342 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive...

6.5CVSS6.9AI score0.00516EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.10 views

Aruba Networks ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that stems from a web-based management interface that allows a remote attacker...

6.5CVSS6.6AI score0.00516EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.11 views

ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that originates in the web-based administration interface that allows an...

6.6CVSS6AI score0.00358EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/27 12:00 a.m.10 views

PT-2024-21343 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager affected versions not specified Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive...

4.8CVSS6.9AI score0.00354EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.10 views

Aruba Networks ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that stems from a web-based management interface that allows an authenticated...

8.8CVSS7.4AI score0.00924EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.8 views

Aruba Networks ClearPass Policy Manager Security Vulnerability

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that stems from a web-based management interface that allows an authenticated...

8.8CVSS7.4AI score0.00928EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/27 12:00 a.m.13 views

The vulnerability of the setWizardCfg function in the /cgi-bin/cstecgi.cgi file of the shttpd component of the TOTOLINK X6000R AX3000 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the setWizardCfg function in the /cgi-bin/cstecgi.cgi file of the shttpd component of the TOTOLINK X6000R AX3000 router software lies in the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.3CVSS6.9AI score0.14809EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/26 12:00 a.m.9 views

The vulnerability of the FactoryTalk service platform’s web interface, which allows attackers to escalate their privileges

The vulnerability of the FactoryTalk service platform’s web interface is related to errors in granting permissions during program execution. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS8AI score0.0099EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/02/23 1:15 a.m.20 views

CVE-2024-1783

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130/9.3.5u.6698B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface. The manipulation of the argument httphost leads to stack-based buffer overflow...

10CVSS9.8AI score0.02029EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/23 1:15 a.m.39 views

Stack overflow

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130/9.3.5u.6698B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface. The manipulation of the argument httphost leads to stack-based buffer overflow...

10CVSS7.3AI score0.02029EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/02/23 12:00 a.m.27 views

CVE-2024-1783 Totolink LR1200GB Web Interface cstecgi.cgi loginAuth stack-based overflow

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130/9.3.5u.6698B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface. The manipulation of the argument httphost leads to stack-based buffer overflow...

10CVSS7AI score0.02029EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/02/23 12:00 a.m.33 views

CVE-2024-1783 Totolink LR1200GB Web Interface cstecgi.cgi loginAuth stack-based overflow

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619B20230130/9.3.5u.6698B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface. The manipulation of the argument httphost leads to stack-based buffer overflow...

10CVSS9.8AI score0.02029EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/23 12:00 a.m.74 views

CVE-2024-1783

CVE-2024-1783 affects Totolink LR1200GB Web Interface, specifically the loginAuth function in /cgi-bin/cstecgi.cgi. The vulnerability arises from manipulation of the http_host argument, triggering a stack-based buffer overflow and enabling remote execution. Affects versions 9.1.0u.6619_B20230130 ...

10CVSS9.8AI score0.02029EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.12 views

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's Gion Electronics TOTOLINK. The TOTOLINK LR1200GB suffers from a buffer overflow vulnerability that originates from the parameter httphost in the file /cgi-bin/cstecgi.cgi that can lead to a stack-based buffer overflow, and n...

10CVSS7.2AI score0.02029EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/02/22 12:00 a.m.15 views

PT-2024-1835 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: Totolink LR1200GB versions 9.1.0u.6619 B20230130 through 9.3.5u.6698 B20230810 Description: A critical vulnerability has been found in the Web Interface component of Totolink LR1200GB, specifically in the loginAuth function of the file...

10CVSS9.6AI score0.02029EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2024/02/21 12:00 a.m.11 views

PT-2024-12443 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted sessio...

5.4CVSS7AI score0.0036EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:00 a.m.13 views

The vulnerability in the web interface for managing access control devices in Fortinet’s FortiNAC system allows a attacker to execute XSS attacks.

The vulnerability in the Fortinet FortiNAC network access control web interface relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

8.3CVSS6.2AI score0.00472EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.11 views

The vulnerability in the web interface of the PAN-OS operating system of the Palo Alto Networks Panorama network switch management system allows a attacker to carry out cross-site scripting attacks.

The vulnerability of the PAN-OS operating system’s web interface in the Palo Alto Networks Panorama network switch management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks remote...

8.3CVSS6.5AI score0.00395EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder