Lucene search
+L

2575 matches found

CNNVD
CNNVD
added 2024/06/05 12:0 a.m.7 views

Cisco Finesse 安全漏洞

Cisco Finesse is the United States Cisco Cisco company's set of call center management software. A cross-site request forgery vulnerability exists in the Cisco Finesse web management interface, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to...

6.1CVSS6.6AI score0.00648EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/05/31 12:0 a.m.6 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotel...

6.4CVSS5.2AI score0.00492EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/23 5:15 p.m.2 views

CVE-2024-2301

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting XSS attack via the web management interface of the device...

7.6CVSS5.8AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/23 5:15 p.m.20 views

CVE-2024-2301

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting XSS attack via the web management interface of the device...

7.6CVSS5.7AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/23 4:53 p.m.26 views

CVE-2024-2301

Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting XSS attack via the web management interface of the device...

5.7AI score0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/23 4:53 p.m.5805 views

CVE-2024-2301

CVE-2024-2301 concerns HP LaserJet Pro devices vulnerable to Cross-Site Scripting (XSS) via the web management interface. Evidence across multiple feeds indicates a web-based XSS weakness in HP LaserJet Pro printers, with the underlying issue described as an XSS vulnerability in the device’s web ...

7.6CVSS5.9AI score0.00298EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.9 views

Hp LaserJet Pro Printer 跨站脚本漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP. A cross-site scripting vulnerability exists in the Hp LaserJet Pro Printer that originates from the device web management interface being susceptible to cross-site scripting attacks...

7.6CVSS5.9AI score0.00298EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/05/23 12:0 a.m.29 views

Cisco Firepower Management Center SQL Injection Vulnerability (CNVD-2024-41676)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center suffers from a SQL injection vulnerability that stems from the web-based management interface not adequately validating user input. A remote attacker coul...

8.8CVSS7.8AI score0.00836EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/16 12:0 a.m.7 views

PT-2024-33828 · Ligowave · Ligowave Pro +3

Name of the Vulnerable Software and Affected Versions: Ligowave UNITY versions through 6.95-2 Ligowave PRO versions through 6.95-1.Rt3883 Ligowave MIMO versions through 6.95-1.Rt2880 Ligowave APC Propeller versions through 2-5.95-4.Rt3352 Description: A vulnerability in the web-based management...

9.4CVSS8.2AI score0.12164EPSS
SaveExploits0References5
OSV
OSV
added 2024/05/15 6:15 p.m.7 views

CVE-2024-20392

A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to insufficient input validation of some parameters that are passed to t...

6.1CVSS6AI score0.00389EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/15 6:15 p.m.18 views

CVE-2024-20369

A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An...

6.1CVSS4.8AI score0.00312EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/15 5:23 p.m.58 views

CVE-2024-20369

CVE-2024-20369 affects Cisco Crosswork Network Services Orchestrator (NSO) Web UI. The issue is improper input validation of a parameter in an HTTP request, enabling an unauthenticated, remote attacker to persuade a user to click a crafted link and be redirected to a malicious website. Documented...

6.1CVSS6.7AI score0.00312EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.12 views

PT-2024-4562 · Cisco · Cisco Asyncos

Name of the Vulnerable Software and Affected Versions: Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to condu...

6.4CVSS6.1AI score0.00319EPSS
SaveExploits0References5
NVD
NVD
added 2024/05/03 2:15 a.m.14 views

CVE-2023-32152

D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

6.5CVSS6.6AI score0.28878EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/03 2:15 a.m.16 views

CVE-2023-32149

D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this...

8.8CVSS9.1AI score0.0124EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 2:15 a.m.8 views

CVE-2023-32149

D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.0124EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.8 views

CVE-2023-32149

D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this...

8.8CVSS6.3AI score0.0124EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/03 2:15 a.m.7 views

CVE-2023-32152

D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

6.5CVSS5.9AI score0.28878EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/05/03 2:15 a.m.8 views

CVE-2023-32148

D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

6.5CVSS5.8AI score0.27449EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/03 2:15 a.m.20 views

CVE-2023-32148

D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within...

6.5CVSS6.6AI score0.27449EPSS
SaveExploits0References2
Rows per page
Query Builder