SUSE CVE-2020-1161

unknown...

SUSE CVE-2020-0602

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'...

Sielco Analog FM Transmitters Cross-Site Request Forgery Vulnerability

Sielco Analog FM Transmitters is an analog FM transmitter from Sielco. A security vulnerability exists in Sielco Analog FM Transmitters that originates from allowing a user to perform certain actions via an HTTP request without performing any validity checks to validate the request...

Twisted Environmental Issues Vulnerability

Twisted is an event-driven open source web engine written in the Python language. A security vulnerability exists in versions prior to Twisted 23.10.0rc1, which stems from the fact that when multiple HTTP requests are sent in a single TCP packet, twisted.web processes the requests asynchronously...

The vulnerability of the centralized management of Fortinet FortiManager devices and FortiAnalyzer network firewalls arises from insufficient validation of incoming requests, allowing attackers to disclose protected information.

The vulnerability of Fortinet’s FortiManager device management system and FortiAnalyzer network monitoring system lies in the insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially crafted HTTP reque...

Fortinet FortiAnalyzer Code Issue Vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is primarily used to collect network log data and analyze, report, and archive security events, network traffic, and Web content in the logs through the Reporting...

PT-2023-29711 · Unknown · Artifact Hub

Name of the Vulnerable Software and Affected Versions: Artifact Hub versions prior to 1.16.0 Description: Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. It includes a fine-grained authorization mechanism that...

PT-2023-7040 · Squid +8 · Squid +9

Name of the Vulnerable Software and Affected Versions: Squid affected versions not specified Description: The issue allows a remote attacker to perform a Denial of Service by sending ftp:// URLs in HTTP Request messages or constructing ftp:// URLs from FTP Native input. This can lead to a...

The vulnerability of the Sangfor NGAF firewall lies in its ability to bypass the authentication mechanism, allowing attackers to circumvent the authentication process.

The vulnerability of the Sangfor NGAF firewall lies in its ability to bypass the authentication mechanism. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process by using specially crafted HTTP requests and a specially created Y-forwarded-for header...

IBM Security Verify Privilege Manager Security Vulnerability

IBM Security Verify Privilege Manager is a security management software from International Business Machines IBM for endpoint privilege management and application control in corporate environments. The software stops unintentional downloads of malware and ransomware from attacking applications by...

PT-2023-28705 · Extreme Networks · Extreme Networks Switch Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks Switch Engine EXOS versions prior to 22.7 Extreme Networks Switch Engine EXOS versions prior to 31.7.1 Extreme Networks Switch Engine EXOS versions prior to 32.5.1.5 Description: An issue in Extreme Networks Switch Engine EXO...

CVE-2023-41680

A improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.1, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all...

CVE-2023-41681

A improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.1, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all...

CVE-2023-41836

An improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiSandbox 4.4.0, FortiSandbox 4.2.1 through 4.2.4, FortiSandbox 4.0 all versions, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0.4 through 3.0.7 allow...

PT-2023-6010 · Fortinet · Fortisandbox

Name of the Vulnerable Software and Affected Versions: FortiSandbox versions 2.4.0 through 2.5.2 FortiSandbox versions 3.2.0 through 3.2.4 FortiSandbox versions 4.0.0 through 4.0.3 FortiSandbox versions 4.2.0 through 4.2.5 FortiSandbox version 4.4.0 Description: The issue is related to an imprope...

Peplink Surf SOHO HW1 Operating System Command Injection Vulnerability

The Peplink Surf SOHO HW1 is a small router from Peplink. An OS command injection vulnerability exists in Peplink Surf SOHO HW1 v6.3.5, which stems from an OS command injection vulnerability in the data.cgi xferdns function. An attacker can exploit this vulnerability to execute commands via...

Fortinet FortiMail Security Vulnerability

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides email security and data protection features. A security vulnerability exists in Fortinet FortiMail that stems from an incorrect authorization vulnerability that allows an authenticated...

The vulnerability of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) lies in their insufficiently checked incoming requests, allowing a perpetrator to trigger a service failure.

The vulnerabilities of the Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P are related to insufficient checking of incoming requests duri...

Fortinet FortiWLM Operating System Command Injection Vulnerability

Fortinet FortiWLM is a wireless manager from Fortinet. A security vulnerability exists in Fortinet FortiWLM that stems from the presence of an operating system command injection vulnerability. The vulnerability allows an attacker to execute unauthorized code or commands via specially crafted http...

The vulnerability of the SetWLanRadioSecurity() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWLanRadioSecurity function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests...