CVE-2021-20997

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users...

CVE-2021-20994

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management...

Arbitrary File Read Vulnerability in EG Easy Gateway WEB Management System of Ruijie Networks Corporation (CNVD-2021-36495)

Ruijie EasyGate is a multi-service integrated gateway product launched by Ruijie Networks to solve the current network egress problems. An arbitrary file read vulnerability exists in the EG EasyGate WEB management system of Ruijie Networks Corporation, which can be exploited by attackers to obtai...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

Authentication flaw

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2021-31520

Trend Micro IM Security web console suffers a weak session token authentication bypass (auth bypass via guessable tokens) affecting 1.6 and 1.6.5. An unauthenticated remote attacker can exploit the guessable tokens to bypass login and access the web management interface (web console on port 16373...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

BSA-2021-1490

Security Advisory ID : BSA-2021-1490 Component : Web Management Interface Revision : 1.1 The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An...

Cisco SD-WAN vManage elevation of privilege vulnerability (CNVD-2021-37686)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An elevation of privilege vulnerability exists in the web management interface of Cisco SD-WAN vManage, which stems from the software not performing authorization checks on...

Cisco SD-WAN vManage Cluster Mode Unauthorized Access Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A cluster mode unauthorized access vulnerability exists in the web management interface of Cisco SD-WAN vManage, which stems from the software not performing authorization...

CVE-2021-20997

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users...

CVE-2021-20994

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management...

Cisco Small Business 操作系统命令注入漏洞

Cisco Small Business is a switch from Cisco. The Cisco Small Business 100, 300, and 500 Series Wireless Access Points contain an operating system command injection vulnerability that can be exploited by an attacker by sending a crafted HTTP request to the web-based management interface of an...

CVE-2020-35757

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root ADB Access Over TCP. The LS9 web interface provides functionality to access ADB over TCP. This is not enabled by default, but can be enabled by sending a crafted request to a web management interface...

CVE-2021-1489

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

Unauthorized Access Vulnerability in HP Web Web Management System

Hewlett-Packard Trading Shanghai Co., Ltd. was registered on February 8, 1999 in the Market Supervision Administration of the Free Trade Zone. Legal representative Chuang Cheng-Sung Chuang Cheng-Sung, the company's business scope includes computer equipment, printing equipment, imaging equipment,...

CVE-2021-0227

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

CVE-2021-0227 Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39576)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate a Web...