17543 matches found
Design/Logic Flaw
A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system...
Cross site scripting
A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface by uploading a specially crafted file. A successful exploit could allow an attacker to execute...
Path traversal
An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise...
Aruba Networks EdgeConnect 安全漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that stems from its web interface that allows an authenticated remote user to run arbitrary commands on the underlying host...
The vulnerability of the control panel interface of the FortiADC application allows attackers to execute cross-site scripting attacks.
The vulnerability of the FortiADC application delivery controller interface exists because measures are not taken to protect the structure of the web page during its creation. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created ...
Aruba Networks EdgeConnect 路径遍历漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that originates from its web interface that allows an authenticated attacker to read arbitrary files on the underlying operating system by...
PT-2022-6296 · Апекс-Вуз · Апекс-Вуз
Name of the Vulnerable Software and Affected Versions: Апекс-ВУЗ affected versions not specified Description: The issue is related to insufficient access control in the web interface of the Апекс-ВУЗ education automation system. Exploitation of this issue may allow a remote attacker to gain acces...
The vulnerability of the FortiWAN traffic balancing system’s web interface allows a attacker to execute arbitrary commands.
The vulnerability of the FortiWAN traffic balancing system’s web interface is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending speciall...
The vulnerability in the web interface for managing microprogramming software on Cisco Firepower Threat Defense (FTD) allows a perpetrator to enhance their privileges.
The vulnerability of the web-based interface for managing Microprogramming Software on Cisco Firepower Threat Defense FTD is related to resource management errors during the identification of endpoints. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending...
Aruba Networks EdgeConnect 安全漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. Aruba Networks EdgeConnect is affected by a security vulnerability that can be exploited by an attacker to create a denial-of-service condition via the web-based management interface that prevents a...
Aruba Networks EdgeConnect 跨站脚本漏洞
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect that stems from a flaw in the web-based management interface that could allow a remote attacker to conduct a Reflective Cross-Site Scripti...
[SECURITY] [DSA 5298-1] cacti security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5298-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 09, 2022 https://www.debian.org/security/faq -...
[SECURITY] Fedora 37 Update: nextcloud-25.0.1-1.fc37
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
[SECURITY] Fedora 36 Update: nextcloud-25.0.1-1.fc36
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
ZKTeco ZKBio Time 跨站脚本漏洞
ZKTeco ZKBio Time is a powerful web-based time and attendance management software from ZKTeco, China. A security vulnerability exists in ZKTeco ZKBio Time prior to version 3.1-164, which originates from a vulnerability that allows users to embed malicious code in the Web UI...
PT-2022-25800 · Ibm · Ibm Cloud Transformation Advisor
Name of the Vulnerable Software and Affected Versions: IBM Cloud Transformation Advisor versions 2.0.1 through 3.3.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within ...
The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a attacker to execute arbitrary commands.
The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...
The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a hacker to bypass security restrictions and gain increased privileges.
The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...
The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a hacker to bypass security restrictions and gain increased privileges.
The vulnerability of the web interface for managing the Aruba EdgeConnect Enterprise Orchestrator platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...
The vulnerability of the luci-mod-system web interface of the LuCI configuration tool in the embedded operating system OpenWrt allows a hacker to perform cross-site scripting attacks.
The vulnerability of the Luci-mod-system web interface configuration module in the embedded operating system OpenWrt is related to the lack of protection for the web page structure during the processing of SSH keys from the /etc/dropbear/authorizedkeys file. Exploiting this vulnerability allows a...