Results
39,956· Page 461/800Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the inte
Improper input validation in the user management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows rem
Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote
Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows
Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remot
Incorrect access control in logs management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote a
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account. The user is not asked to cha
Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not asked
Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows r
Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows r
An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lea
An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of ser
A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System
CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId param
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function
TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName para
Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D25
Certain Anpviz products allow unauthenticated users to download arbitrary files from the device's filesystem via a HTTP
Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volu
Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET r
F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`
F-logic DataCube3 v1.0 is affected by command injection due to improper string filtering at the command execution point
Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute
Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands wit
SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server.
In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network
A cross-site scripting (XSS) vulnerability in the Edit function of Formwork before 1.13.0 allows attackers to execute ar
Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.
ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.
A SQL injection vulnerability in /model/get_timetable.php in campcodes Complete Web-Based School Management System 1.0 a
A SQL injection vulnerability in /model/get_teacher_timetable.php in campcodes Complete Web-Based School Management Syst
A SQL injection vulnerability in /model/get_grade.php in campcodes Complete Web-Based School Management System 1.0 allow
A SQL injection vulnerability in /model/get_student.php in campcodes Complete Web-Based School Management System 1.0 all
A SQL injection vulnerability in /model/get_subject.php in campcodes Complete Web-Based School Management System 1.0 all
A SQL injection vulnerability in /model/get_exam.php in campcodes Complete Web-Based School Management System 1.0 allows
A SQL injection vulnerability in /model/get_student_subject.php in campcodes Complete Web-Based School Management System
A SQL injection vulnerability in /model/get_subject_routing.php in campcodes Complete Web-Based School Management System
A SQL injection vulnerability in /model/get_student1.php in campcodes Complete Web-Based School Management System 1.0 al
A SQL injection vulnerability in /model/get_teacher.php in campcodes Complete Web-Based School Management System 1.0 all
If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of Au
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of Au
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of
Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Automa
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of Automa
Test your stack for 2024issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.