WatchGuard Firebox 跨站脚本漏洞

WatchGuard Firebox is a US-based WatchGuard company that provides comprehensive network security services ranging from traditional IPS, GAV, website/application control and malicious software prevention. A security vulnerability exists in the WatchGuard Firebox and XTM appliances that originates...

The vulnerability of the notrinoserp enterprise web management system, related to weak password requirements, allows attackers to escalate their privileges.

The vulnerability of the notrinoserp enterprise web management system is related to weak password requirements. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

PLANEX Chibi Fai 3 安全漏洞

The PLANEX Chibi Fai 3 is a travel wireless LAN router that plugs directly into an outlet from PLANEX Japan. A security vulnerability exists in PLANEX Chibi Fai 3 versions 1.42 and 1.43, which originates from an insecure privilege in the management interface that allows an attacker to execute...

CVE-2022-37063

All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting XSS due to improper input sanitization. An authenticated remote attacker can execute arbitrary JavaScript code in the web management interface. A successful exploit could allow the...

CVE-2022-37063

All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting XSS due to improper input sanitization. An authenticated remote attacker can execute arbitrary JavaScript code in the web management interface. A successful exploit could allow the...

PT-2022-23779 · Flir · Flir Ax8

Name of the Vulnerable Software and Affected Versions: FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 Description: The issue is due to improper input sanitization, allowing an authenticated remote attacker to execute arbitrary JavaScript code in the web management interface...

CVE-2022-36312

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36309

Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36311

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36309

Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36311

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

Design/Logic Flaw

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

Cross site request forgery (csrf)

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

Command injection

Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36312

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36312

CVE-2022-36312 affects Airspan AirVelocity 1500, version 15.18.00.2511, with CSRF protections missing in the eNodeB web management UI. Other AirVelocity/AirSpeed models may be affected. The root cause is the lack of CSRF protections in the web UI, leading to potential CSRF exploitation; no specif...

CVE-2022-36311

CVE-2022-36311 affects Airspan AirVelocity 1500 (and may affect AirSpeed models) with versions prior to 15.18.00.2511. The root cause is an injection that enables cross-site scripting in the SNMP community field of the eNodeB web management UI. The available sources state the vulnerability and af...

CVE-2022-36309

Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36309

CVE-2022-36309 affects Airspan AirVelocity 1500 (and possibly AirSpeed models) with versions prior to 15.18.00.2511. The vuln is a root command injection in the ActiveBank parameter of recoverySubmit.cgi running on the eNodeB web management UI. Impact is associated with potential full compromise ...

CVE-2022-36306

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still...