CVE-2021-20844

Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to obtain sensitive...

yamaha 部分产品 信息泄露漏洞

Yamaha NVR500 and others are products of Yamaha Corporation, Japan.Yamaha NVR500 is an Enterprise Router.Yamaha RTX810 is a Gigabit VPN Virtual Private Network Router.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a malicious actor to enhance their privileges within the system.

The vulnerability of the Web interface for collecting device information on Cisco Common Services Platform Collector is related to an incorrect configuration of the system log. Exploiting this vulnerability allows a malicious actor to specify files other than logs as sources for the system log...

PT-2021-4989 · Mcafee · Mcafee Policy Auditor

Name of the Vulnerable Software and Affected Versions: McAfee Policy Auditor versions prior to 6.5.2 Description: The issue is related to a Reflected Cross-Site Scripting vulnerability in the web interface of McAfee Policy Auditor. This vulnerability allows a remote unauthenticated attacker to...

CVE-2021-40131

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

CVE-2021-40131

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 allows a hacker to cause a service failure.

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a specially crafted request t...

Vulnerabilities fixed in IBM Security SiteProtector System

IBM has fixed two vulnerabilities in SiteProtector. A malicious party can exploit the vulnerabilities to execute arbitrary execute arbitrary JavaScript code in the Web interface to potentially gain access to system data or sensitive data, such as credentials. To do this, the malicious party must...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a perpetrator to gain access to protected information.

The vulnerability in the web interface for collecting device information on Cisco Common Services Platform Collector is related to errors that occur when responding to valid API requests. Exploiting this vulnerability can allow an attacker to gain access to protected information by sending a...

PT-2021-7647 · Fatpipe · Ipvpn +2

Name of the Vulnerable Software and Affected Versions: FatPipe WARP, IPVPN, and MPVPN versions prior to 10.1.2r60p92 and 10.2.2r44p1 Description: A vulnerability in the web management interface of FatPipe software allows a remote, unauthenticated attacker to upload a file to any location on the...

Cisco Common Services Platform Collector Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

CVE-2021-40131

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

Cisco Common Services Platform Collector 跨站脚本漏洞

Cisco Common Services Platform Collector CSPC is an SNMP-based tool that discovers and collects information from Cisco devices installed on the network. management interface contains a stored cross-site scripting vulnerability that can be exploited by attackers using the Web management interface ...

The vulnerability of the web interface of the operating system PAN-OS allows a perpetrator to enhance their privileges and execute arbitrary code.

The vulnerability of the PAN-OS operating system’s web interface is related to synchronization errors when using common resources. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...

The vulnerability in the web interface of the Cisco Umbrella security cloud service allows a attacker to obtain the email addresses of system users.

The vulnerability of the web interface of the Cisco Umbrella security cloud service relates to the disclosure of information in error messages. Exploiting this vulnerability can allow a malicious actor to obtain the email addresses of system users remotely...

The vulnerability in the web interface of the Pulse Connect Secure VPN server for corporate networks allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface of VPN servers for corporate networks provided by Pulse Connect Secure relates to the unlimited download of files with the .gzip extension. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability in the software web interface of F-Secure Internet Gatekeeper allows a hacker to trigger a service failure.

The vulnerability of the F-Secure Internet Gatekeeper software’s web interface relates to the use of the assert function or similar operators when processing user name parameters. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted HT...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network administration allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Firepower Management Center FMC software network interface relates to incorrect checking of input parameters for HTTP requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems is related to insufficient cleaning of input data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2021-3058

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permissions to use XML API the ability to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1;...