Schweitzer Engineering Laboratories RTAC Improper Input Validation (CVE-2023-31161)

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow an authenticated remote attacker to use internal resources, allowing a variety of potential effects. See SEL Service Bulletin dated 2022-11-15 f...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

CVE-2023-24584

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior...

CVE-2023-24584

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior...

Buffer overflow

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior...

CVE-2023-24584

CVE-2023-24584 affects Gallagher Controller 6000. The vulnerability is a buffer overflow triggered by the Controller diagnostic web interface upload feature. Affected versions include before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, and all versions ...

CVE-2023-24584 Controller 6000 buffer overflow via upload feature in web interface

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. This issue affects Controller 6000: before vCR8.80.230201a, before vCR8.70.230201a, before vCR8.60.230201b, before vCR8.50.230201a, all versions of vCR8.40 and prior...

PT-2023-19692 · Unknown · Controller 6000

Name of the Vulnerable Software and Affected Versions: Controller 6000 versions prior to vCR8.80.230201a Controller 6000 versions prior to vCR8.70.230201a Controller 6000 versions prior to vCR8.60.230201b Controller 6000 versions prior to vCR8.50.230201a Controller 6000 versions vCR8.40 and prior...

PT-2023-24239 · Starface · Starface

Name of the Vulnerable Software and Affected Versions: STARFACE affected versions not specified Description: The web interface and REST API of STARFACE allow authentication using the SHA512 hash of the password instead of the cleartext password. This practice renders the protection of storing...

Gallagher Controller 6000 安全漏洞

The Gallagher Controller 6000 is an interface between the Gallagher Command Center server and distributed field hardware from Gallagher New Zealand. A security vulnerability exists in the Gallagher Controller 6000 that originates from an attacker being able to cause a buffer overflow via the uplo...

STARFACE 7.3.0.10 Broken Authentication

Advisory: STARFACE: Authentication with Password Hash Possible RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the password instead of the cleartext password. While storing password hashes instead of cleartext...

CVE-2023-33635

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /goform/aspForm...

CVE-2023-33735

D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution RCE vulnerability via the tomographypingaddress parameter in the /HNAP1 interface...

The vulnerability in the web interface of Cisco NX-OS and FXOS router devices from Cisco UCS Fabric Interconnect allows a attacker to trigger a service failure.

The vulnerability of the web interface of Cisco NX-OS and FXOS router devices from Cisco UCS Fabric Connect is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted HTTP request...

The vulnerability of the built-in software of the ARIS controller lies in the insufficient protection of operational data, allowing attackers to obtain user authentication credentials.

The vulnerability of the ARIS controller’s built-in software is related to insufficient protection of authentication data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user authentication data from the web interface...

The vulnerability of the web interface of D-Link DIR-620 microprogrammed router software allows a hacker to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of the web interface of D-Link DIR-620 microprogrammed software routers is related to the use of pre-installed registration data. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

The vulnerability in the web interface of the Cisco Prime Collaboration Deployment software allows a attacker to disclose sensitive information, alter the appearance of the web page, and perform phishing attacks as well as “drive-down” attacks.

The vulnerability in the Cisco Prime Collaboration Deployment software’s web interface exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information, alter the appearance of the website, and perfor...

Directory Traversal Vulnerability in GitLab CE/EE

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. GitLab CE/...

Rockwell ArmorStart Improper Input Validation (CVE-2023-29027)

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

Rockwell ArmorStart Improper Input Validation (CVE-2023-29028)

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...