CVE-2021-20493

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197794...

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Cisco Unified Communications Manager Im & Presence Service, and Cisco Unity Connection allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Web interface for controlling Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Cisco Unified Communications Manager Im & Presence Service, and Cisco Unity Connection is related to incorrect path name restrictions in the access control catalo...

The vulnerability of the Web interface and API of the Cisco Application Policy Infrastructure Controller allows attackers to execute cross-site scripting attacks.

The vulnerability of the Cisco Application Policy Infrastructure Controller’s web interface and API exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

CVE-2021-20493

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197794...

IBM Cognos Analytics 跨站脚本漏洞

IBM Cognos Analytics is a business intelligence software from IBM Corporation. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing content such as key factors and key people. IBM Cognos Analytics has a security vulnerability...

The vulnerability of the TPL template implementation in the web interface for SMS gateways and PlaySMS’ SMS messaging services allows a perpetrator to execute arbitrary code.

The vulnerability of the TPL template implementation src/Playsms/Tpl.php:compile in the web interface for SMS gateways and PlaySMS’s SMS messaging services is related to insufficient cleaning of special string elements. Exploiting this vulnerability could allow an attacker operating remotely to...

The vulnerability of the ping and tracert commands implemented in the web interface for managing Netis WF2419 router microprogramming software allows a perpetrator to execute arbitrary commands and gain unauthorized access to protected information.

The vulnerability of the ping and tracert commands in the web interface for managing Netis WF2419 microprogramming devices relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and gain...

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web interface of microprogramming software for Cisco 250/350/350X/550X/ESW2 Series and Cisco Business 250/350 Series devices stems from insufficient input data validation. This allows attackers to gain unauthorized access to limited resources.

The vulnerability of the web interface of microprogramming software for Cisco 250/350/350X/550X/ESW2 Series and Cisco Business 250/350 Series devices is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized...

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTPS request from a remo...

The vulnerability of the application’s web interface for automated internal and external IT audits. McAfee Policy Auditor allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the application’s web interface for automating internal and external IT audits, as provided by McAfee Policy Auditor, is related to the failure to protect the structure of the web page when processing the UID request parameter. Exploiting this vulnerability allows a malicious...

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data, allowing attackers to execute arbitrary commands.

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series router microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

Command injection

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

CVE-2021-43283

An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the device, allowing an attacker with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges. This occurs in the...

CVE-2021-43283

The CVE-2021-43283 entry concerns Victure WR1200 routers (firmware 1.0.3 and earlier). The issue is a command-injection vulnerability in the device’s web interface, specifically in the ping and traceroute features. When an attacker has valid credentials, they can inject arbitrary shell commands t...

Victure WR1200 操作系统命令注入漏洞

The Victure WR1200 is a router. A security vulnerability exists in the Victure WR1200 1.0.3 and prior versions, which stems from a lack of command filtering and restriction in the device's web interface, resulting in a command injection vulnerability that could be exploited by an attacker to inje...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to perform cross-site scripting attacks or gain unauthorized access to protected information.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves the use of open redirection. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks or gain unauthorized access to protected information through a...