PT-2018-1819

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance Media Server affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to cause a denial of service DoS of the interface. The issu...

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability (CNVD-2019-01908)

Cisco Prime Collaboration Assurance PCA is the United States Cisco Cisco a set of enterprise collaboration network management solutions. The program supports a unified management console to simplify the management of unified communications and video collaboration network, as well as rapid...

OrientDB Studio web management interface is vulnerable to clickjacking attacks

The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

PT-2018-2007

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perfo...

Cisco Identity Services Engine WEB Management Interface Arbitrary Command Execution Vulnerability

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A security vulnerability...

CVE-2018-0445

A vulnerability in the web-based management interface of Cisco Packaged Contact Center Enterprise could allow an unauthenticated, remote attacker to conduct a CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-bas...

CVE-2017-2873

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting...

CVE-2017-2873

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting...

CVE-2017-2873

The CVE-2017-2873 vulnerability affects Foscam C1 Indoor HD Camera (web management interface) where the SoftAP configuration can be manipulated via CGIProxy.fcgi?setSoftApConfig. The OnDevMngMsgSetSoftApConfig path copies fixed SSID with user-supplied PSK into the SoftAP config, then sub_4519C/su...

CVE-2017-2878

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2878

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

CVE-2017-2878

CVE-2017-2878 affects the Foscam C1 Indoor HD Camera web management interface. The issue is a buffer overflow in the CGIProxy.fcgi logOut path: a user-supplied username (buffer size up to 0x40) is copied into a 0x20-byte field via strcpy, allowing an attacker—requiring at least a visitor-privileg...

CVE-2017-2873: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during the SoftAP configuration resulting...

PT-2018-7223

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A buffer overflow issue exists in the web management interface of the affected device. It can be triggered by a specially crafted HTTP request, potentially allowing an attacker to...

PT-2018-7218

Name of the Vulnerable Software and Affected Versions: Foscam C1 Indoor HD Camera version 2.52.2.43 Description: A command injection issue exists in the web management interface of the affected device. It can be triggered by sending a specially crafted HTTP request, allowing an attacker to inject...

CVE-2017-2878: Buffer Copy without Checking Size of Input

An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A specially crafted HTTP request can cause a buffer overflow resulting in overwriting arbitrary data. An attacker can simply send an...

PT-2018-2283 · Cisco · Cisco Small Business Routers

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could...

Management Interface Buffer Overflow Vulnerability in Various Cisco Routers

The Cisco RV110W, RV130W, and RV215W are all Cisco router products. A buffer overflow vulnerability exists in the management interface of several Cisco routers, which is caused by improperly restricting the boundaries of user-supplied inputs in the Guest user function of the web-based management...

Directory traversal

The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP formerly TOUGHSwitch allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This...

PT-2018-4575

Name of the Vulnerable Software and Affected Versions Ubiquiti airMAX versions prior to 7.1.3 Ubiquiti airMAX M versions prior to 5.6.2 Ubiquiti airMAX M versions prior to 5.5.11 Ubiquiti airMAX M versions prior to 5.5.10u2 Ubiquiti airGateway versions prior to 1.1.5 Ubiquiti airFiber AF24/AF24HD...