The vulnerability in the web interface for managing microprogramming software on Cisco Firepower Threat Defense (FTD) allows a perpetrator to enhance their privileges.

The vulnerability of the web-based interface for managing Microprogramming Software on Cisco Firepower Threat Defense FTD is related to resource management errors during the identification of endpoints. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending...

The vulnerability of the FortiWAN traffic balancing system’s web interface allows a attacker to execute arbitrary commands.

The vulnerability of the FortiWAN traffic balancing system’s web interface is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending speciall...

Aruba Networks EdgeConnect 跨站脚本漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that stems from a flaw in the web-based management interface that could allow a remote attacker to conduct a Reflective Cross-Site Scripti...

Aruba Networks EdgeConnect 安全漏洞

Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. Aruba Networks EdgeConnect is affected by a security vulnerability that can be exploited by an attacker to create a denial-of-service condition via the web-based management interface that prevents a...

[SECURITY] [DSA 5298-1] cacti security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5298-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2022 https://www.debian.org/security/faq -...

[SECURITY] Fedora 37 Update: nextcloud-25.0.1-1.fc37

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

[SECURITY] Fedora 36 Update: nextcloud-25.0.1-1.fc36

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

PT-2022-25800 · Ibm · Ibm Cloud Transformation Advisor

Name of the Vulnerable Software and Affected Versions: IBM Cloud Transformation Advisor versions 2.0.1 through 3.3.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within ...

ZKTeco ZKBio Time 跨站脚本漏洞

ZKTeco ZKBio Time is a powerful web-based time and attendance management software from ZKTeco, China. A security vulnerability exists in ZKTeco ZKBio Time prior to version 3.1-164, which originates from a vulnerability that allows users to embed malicious code in the Web UI...

The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a hacker to bypass security restrictions and gain increased privileges.

The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...

The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a attacker to execute arbitrary commands.

The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a hacker to bypass security restrictions and gain increased privileges.

The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...

PT-2022-16030 · Freshrss · Freshrss

Name of the Vulnerable Software and Affected Versions: FreshRSS versions prior to 1.20.2 Description: FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition to user preferences, such configurations contain hashed passwords of the...

FreshRSS 信息泄露漏洞

FreshRSS is a free, self-hosted RSS aggregator from the FreshRSS open source. An information disclosure vulnerability exists in versions of FreshRSS prior to 1.20.2 that stems from a remote user being able to access user configuration files, such configurations contain hashed passwords for the we...

The vulnerability of the luci-mod-system web interface of the LuCI configuration tool in the embedded operating system OpenWrt allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Luci-mod-system web interface configuration module in the embedded operating system OpenWrt is related to the lack of protection for the web page structure during the processing of SSH keys from the /etc/dropbear/authorizedkeys file. Exploiting this vulnerability allows a...

Fedora: Security Advisory for nextcloud (FEDORA-2022-49b20342c0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Design/Logic Flaw

Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface...

CVE-2022-37918

Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...

CVE-2022-37916

Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...

Aruba Networks AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform is the leading multi-vendor management platform designed for local campus environments, providing granular visibility into wired and wireless networks from Aruba Networks. A security vulnerability in Aruba Networks AirWave Management Platform version...