2619 matches found
PT-2023-32582 · Draytek · Draytek Vigor2960
Name of the Vulnerable Software and Affected Versions: Draytek Vigor2960 versions 1.5.1.4 through 1.5.1.5 Description: The issue allows an authenticated attacker with access to the web management interface to delete arbitrary files via directory traversal. This is achieved through the...
Cisco IP Phone 安全漏洞
Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. Cisco IP Phones suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the web-based management...
Cisco Identity Services Engine 安全漏洞
Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. The Cisco Identity Services Engine suffers from...
PT-2023-7384 · Fortinet · Fortiadc +1
Name of the Vulnerable Software and Affected Versions: Fortinet FortiADC versions 7.1.0 through 7.1.1 FortiDDoS-F versions 6.3.0 through 6.3.4 FortiDDoS-F versions 6.4.0 through 6.4.1 Description: A permissive cross-domain policy with untrusted domains vulnerability allows an unauthorized attacke...
PT-2023-9616 · Cisco · Rv320 +3
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV042, RV042G, RV320, and RV325 Routers affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to cause an...
Cisco Firepower Management Center Cross-Site Scripting Vulnerability (CNVD-2023-85952)
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center FMC suffers from a cross-site scripting vulnerability that originates from insufficient validation of user-supplied input in the web management interface,...
Cisco Identity Services Engine Arbitrary File Upload Vulnerabilities (cisco-sa-ise-file-upload-FceLP4xs)
According to its self-reported version, Cisco Identity Services Engine is affected by multiple arbitrary file upload vulnerabilities. Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, a...
Input validation
Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require...
Cisco Firepower Management Center 跨站脚本漏洞
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center that stems from insufficient validation of user-supplied input in the web management interface, allowing an...
PT-2023-7569 · Cisco · Cisco Identity Services Engine
Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to unlimited file upload of dangerous types. An attacker with valid Administrator credentials could exploit this by uploading a crafted file ...
PT-2023-7570 · Cisco · Cisco Firepower Management Center
Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is due to insufficient validation of user-supplied input for certain configuration options in the web management interface. An authenticated...
Exploit for Classic Buffer Overflow in Draytek Vigor3910_Firmware
CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code exe...
CVE-2023-43508
Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance. Successful exploitation of these vulnerabilities allow an attacker to...
CVE-2023-5222
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5222
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
Hardcoded credentials
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5222
Summary (CVE-2023-5222) A critical vulnerability exists in Viessmann Vitogate 300 Web Management Interface. The issue affects the function isValidUser in /cgi-bin/vitogate.cgi, enabling authentication via a hard-coded password. Affected firmware versions: up to 2.1.3.0. Public PoCs and exploitat...
CVE-2023-5222 Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
CVE-2023-5222 Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password
A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-coded password. The exploit has been...
Green Rocket Security GreenRADIUS Cross-Site Scripting Vulnerability
Green Rocket Security GreenRADIUS is a multiple authentication server from Green Rocket Security, Inc. to integrate with various applications and services to enforce MFA. A cross-site scripting vulnerability exists in Green Rocket Security GreenRADIUS v5.1.1.1 and prior versions, which stems from...