17498 matches found
TYAN Tempest CX S5552 安全漏洞
The TYAN Tempest CX S5552 is TYAN's server motherboard for the Xeon E-Series. A security vulnerability exists in the TYAN Tempest CX S5552 version 3.00, which originates from the presence of an externally accessible file or directory in the web interface, which could allow an unauthenticated,...
PT-2023-5219 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to a lack of protection for the web page structure in the ArubaOS web interface. This could allow a remote attacker to conduct a reflected cross-site scripting XSS atta...
PT-2023-5715 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management interface. Successful exploitation results in a...
The vulnerability in the web interface of Siemens SICAM Q200 multifunctional measuring devices allows a intruder to perform arbitrary actions.
The vulnerability of the web interface for controlling Siemens SICAM Q200 multifunctional measuring devices is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...
PT-2023-8183 · Zyxel · Zyxel Nas326 +1
Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 firmware version V5.21AAZF.14C0 Zyxel NAS542 firmware version V5.21ABAG.11C0 Description: The issue is related to the improper neutralization of special elements in the CGI program of the Zyxel NAS326 and NAS542 firmware. This...
CVE-2023-33276
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without...
CVE-2023-33276
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without...
The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series allows a perpetrator to execute arbitrary code with root privileges.
The vulnerability of the web interface of Cisco Small Business Series microprogramming software involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administrative tool allows a perpetrator to execute arbitrary SQL code.
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...
The vulnerability in the web-based interface for managing the ArcServe UDP data protection software allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the web interface for managing the ArcServe UDP data protection software is related to errors in processing serialized data. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code by sending a specially crafted HTTP reque...
CVE-2023-33276
The CVE-2023-33276 issue affects Gira KNX/IP-Router web interface versions 3.1.3683.0–3.3.8.0, where reflecting a non-existent path in the HTTP response without HTML encoding enables reflective cross-site scripting (XSS). Documented by multiple sources (e.g., Red Hat, PRion/PT Security) note the ...
PT-2023-24260 · Gira Giersiepen · Gira Knx/Ip-Router
Name of the Vulnerable Software and Affected Versions: Gira Giersiepen Gira KNX/IP-Router versions 3.1.3683.0 through 3.3.8.0 Description: The web interface of the affected software responds with a "404 - Not Found" status code when accessing a non-existent path, and the value of the path is...
CVE-2023-33277
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL...
Directory traversal
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL...
CVE-2023-33277
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL...
D-Link DWL-2600AP Access Point Command Injection Vulnerability
D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=configsave configBackup or downloadServerip parameter...
CVE-2023-32222
D-Link DSL-G256DG version vBZ1.00.27 web management interface allows authentication bypass via an unspecified method...
CVE-2023-2625
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user...
Design/Logic Flaw
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user...
CVE-2023-2625
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user...