CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

Command injection

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface...

CVE-2022-29558

Realtek rtl819x-SDK (Realtek RTL819x-SDK) is affected by CVE-2022-29558. The issue exists in versions prior to 3.6.1 and stems from insufficient validation of the receive buffer, enabling command injection via the web interface. Affected component: rtl819x-SDK web interface; root cause: inadequat...

PT-2022-19697 · Realtek · Realtek Rtl819X-Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x-SDK versions prior to 3.6.1 Description: The issue allows command injection over the web interface. This can potentially be exploited to execute unauthorized commands on the affected system. Recommendations: For versions prior...

Realtek rtl819x-SDK 命令注入漏洞

Realtek rtl819x-SDK is a new/clean Linux kernel driver/module from Realtek Semiconductor China. It is used for IEEE 802.11 wireless Ethernet adapters based on Realtek's RTL8180L and RTL8185L chipsets. A security vulnerability exists in versions prior to Realtek rtl819x-SDK v3.6.1, which stems fro...

CVE-2022-30269

Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit, or the ACE1000 Easy Configurator. In the case of the Easy Configurator, application images as PLX/DAT/APP/CRC files are uploaded via the...

Synology Calendar 跨站请求伪造漏洞

Synology Calendar, a file protection application running on Synology NAS devices from Synology, Taiwan, China, is vulnerable to cross-site request spoofing in versions prior to Synology Calendar 2.3.4-0631, which stems from a webapi component that does not adequately validate that the request is...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

CVE-2021-40335

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...

CVE-2021-40335

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...

CVE-2021-40336

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

CVE-2021-40336

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

Design/Logic Flaw

A vulnerability exists in the http web interface where the web interface does not validate data in an HTTP header. This causes a possible HTTP response splitting, which if exploited could lead an attacker to channel down harmful code into the user’s web browser, such as to steal the session...

Cross site request forgery (csrf)

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...

CVE-2021-40336

Hitachi Energy MSM (versions 2.2 and prior) is affected by CVE-2021-40336 due to improper validation of data in HTTP headers, enabling HTTP response splitting and potential in-browser code execution to steal session cookies. ED docs indicate a remediation path: update to a fixed MSM version, and ...

CVE-2021-40335

Hitachi Energy MSM (Mon i toring System for high‑voltage switchgear) is affected by CVE-2021-40335. The vulnerability is a Cross‑Site Request Forgery (CSRF) in the HTTP web interface caused by insufficient verification of user‑intended, well‑formed requests. A successful exploit could allow an at...

CVE-2021-40335 Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...

The vulnerability of the requestTempFile function in the web interface of the unified console consolidation platform for backup and archiving FUJITSU ETERNUS CS8000 allows a hacker to execute arbitrary commands.

The vulnerability of the requestTempFile function in the web interface of the unified console consolidation platform for backup and archiving FUJITSU ETERNUS CS8000 relates to the possibility of executing commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

fava 跨站脚本漏洞

fava is the web interface for Beancount, a double-entry bookkeeping software open source by Beancount. A security vulnerability exists in versions prior to fava 1.22.2. An attacker could exploit this vulnerability to perform cross-site scripting attacks...