Remote Clinic Cross-Site Scripting Vulnerability (CNVD-2021-31665)

Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A stored cross-site scripting vulnerability exists in /medicines in Remote Clinic v2.0. The vulnerability can be exploited to conduct a cross-site scripting attack via the Medicine...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39585)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which stems from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate Web...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39579)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate a Web...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39582)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which stems from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate Web...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39577)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate a Web...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39578)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which stems from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate Web...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39586)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from the UEFI configuration function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39583)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which originates from the Web Service configuration function not validating the length of a string entered by the user, and can be exploited by a remote attacker...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39580)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate a Web...

ASUS BMC Firmware Buffer Overflow Vulnerability

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a DNS configuration function that does not validate the length of a string entered by the user, and can be exploited by a remote attacker to...

ASUS BMC Firmware Buffer Overflow Vulnerability (CNVD-2021-39581)

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from the Active Directory configuration function not validating the length of a string entered by a user, and can be exploited by a remote attacke...

Design/Logic Flaw

In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords...

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers RCE (cisco-sa-sb-rv34x-rce-8bfG2h6b)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340, RV340W, RV345 and RV345P Routers which could allow an authenticated, remote attacker to execute...

Remote Clinic Cross-Site Scripting Vulnerability

Remote Clinic is an open source clinic management system that allows you to remotely manage your clinic via the Web. A cross-site scripting vulnerability exists in Remote Clinic v2.0. The vulnerability can be exploited to inject arbitrary script or html via the First Name or Last Name field of...

Weak Password Vulnerability in AR Web Management Platform

Huawei Technologies Limited operates in the areas of switches, transmission equipment, data communication equipment, broadband multimedia equipment, power supply, wireless communication equipment, microelectronic products and software. A weak password vulnerability exists in the AR Web management...

Multiple vulnerabilities in multiple Aterm products

Overview Multiple Aterm products provided by NEC Corporation contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2021-20680 OS command injection via UPnP CWE-78 - CVE-2014-8361 CVE-2021-20680 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this...

CVE-2021-1473

Cisco Small Business RV Series Routers (RV16X/RV26X, RV34X, etc.) web management has multiple vulnerabilities (CVE-2021-1473) allowing remote command execution via the web interface, including an authentication bypass and file upload on upload.cgi. Exploitation can enable arbitrary OS commands; s...

ASUS BMC Firmware Security Feature Issue Vulnerability

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC Firmware Web management page, which originates from a buffer overflow vulnerability caused by the CD media configuration function not validating the length of a user-entered string. A...

ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36007)

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to a specific function not validating the length of a user-entered string. A remote attacker cou...

ASUS BMC Firmware Security Feature Issue Vulnerability (CNVD-2021-36006)

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a string entered by the user. A...