Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2020-15046 | Supermicro X10DRH-iT 2.0a 03.40 Web Interface cgi/config_user.cgi cross-site request forgery (EDB-48652)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability has been found in Supermicro X10DRH-iT 2.0a 03.40 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file cgi/config_user.cgi of the component Web Interface. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2020-15046. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

📰 Supermicro vs Bloomberg: Yossi Appleboum disagrees bloomberg is positioning his research against Supermicro


📈 35.15 Punkte
📰 IT Security Nachrichten

🕵️ CVE-2023-5222 | Viessmann Vitogate 300 up to 2.1.3.0 Web Management Interface /cgi-bin/vitogate.cgi isValidUser hard-coded password (EDB-51887)


📈 34.78 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2013-3623 | Supermicro Intelligent Platform Management up to 2.25 Intelligent Platform Management Interface ACT memory corruption (EDB-29666 / BID-63775)


📈 33.8 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-33412 | Supermicro X11/M11 prior 3.17.02 Web Interface Privilege Escalation


📈 29.87 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Supermicro IPMI Web Interface Unspecified Remote Privilege Escalation Vulnerability


📈 28.72 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Supermicro IPMI Web Interface Unspecified Remote Privilege Escalation Vulnerability


📈 28.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1783 | Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810 Web Interface /cgi-bin/cstecgi.cgi loginAuth http_host stack-based overflow


📈 27.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8461 | D-Link DNS-320 2.02b01 Web Management Interface /cgi-bin/discovery.cgi information disclosure (SAP10383)


📈 27.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-8460 | D-Link DNS-320 2.02b01 Web Management Interface /cgi-bin/widget_api.cgi getHD/getSer/getSys information disclosure (SAP10383)


📈 27.01 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Finesse Web-based Management Interface Request Server-Side Request Forgery


📈 26.93 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco Finesse Web-based Management Interface Request Server-Side Request Forgery


📈 26.93 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-33411 | Supermicro X11/M11 up to 3.17.02 Intelligent Platform Management Interface path traversal


📈 26.03 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-33413 | Supermicro X11/M11 up to 3.17.02 Intelligent Platform Management Interface hard-coded credentials


📈 26.03 Punkte
🕵️ Sicherheitslücken

🕵️ Barracuda Web Filter 5.0.0.012 Admin Interface /cgi-mod/index.cgi privilege escalation


📈 25.87 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Supermicro IPMI 'close_window.cgi' Multiple Buffer Overflow Vulnerabilities


📈 24.93 Punkte
🕵️ Sicherheitslücken

🕵️ Vuln: Supermicro IPMI 'close_window.cgi' Multiple Buffer Overflow Vulnerabilities


📈 24.93 Punkte
🕵️ Sicherheitslücken

💾 Supermicro Onboard IPMI Url_redirect.cgi Authenticated Directory Traversal


📈 24.93 Punkte
💾 IT Security Tools

💾 Supermicro Onboard IPMI CGI Scanner


📈 24.93 Punkte
💾 IT Security Tools

📰 Vulnerabilities found in the remote management interface of Supermicro servers


📈 24.89 Punkte
📰 IT Security Nachrichten

🕵️ CVE-2019-18939 | eQ-3 Homematic CCU2/Homematic CCU3 Web Interface exec.cgi HTTP POST Request input validation


📈 24.6 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-18937 | eQ-3 Homematic CCU2/Homematic CCU3 Web Interface exec.cgi HTTP POST Request input validation


📈 24.6 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-19642 | Supermicro X8STi-F 2.06 /rpc/setvmdrive.asp POST Request os command injection


📈 23.67 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-5082 | Endian Firewall up to 2.x cgi-bin/chpasswd.cgi NEW_PASSWORD_1/NEW_PASSWORD_2 command injection (ID 133469 / EDB-37426)


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-1999-0935 | Classifieds CGI Form classifieds.cgi privileges management (EDB-20442 / Nessus ID 11748)


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-5639 | Crestron AirMedia AM-100 up to 1.4.0.12 cgi-bin/login.cgi src path traversal (EDB-40813 / ID 13230)


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2001-0214 | Way Way-Board Cgi way-board.cgi db File information disclosure (EDB-20629 / Nessus ID 10610)


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2000-1069 | CGI-World Poll It 1.6/2.0/2.01 pollit.cgi entered_password/admin_password privileges management (EDB-177 / XFDB-5419)


📈 23.63 Punkte
🕵️ Sicherheitslücken

🕵️ PLANEX CS-W50HD up to 30719 Web Management UI /cgi-bin/nasset.cgi HTTP POST Request command injection


📈 23.5 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-36444 | Swissphone DiCal-RED 2.cgi Log cgi-bin/fdmcgiwebv2.cgi information disclosure (SYSS-2024-040)


📈 23.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-36442 | Swissphone DiCal-RED 2.cgi cgi-bin/fdmcgiwebv2.cgi improper authentication (SYSS-2024-039)


📈 23.22 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2021-37498 | Reprise License Manager up to 14.2BL4 Web Interface actserver server-side request forgery


📈 23.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20332 | Cisco Identity Services Engine Software 3.2.0/3.3.0 Web-based Management Interface server-side request forgery (cisco-sa-ise-ssrf-FtSTh5Oz)


📈 23.12 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20404 | Cisco Unified Contact Center Enterprise Web-Based Management Interface server-side request forgery (cisco-sa-finesse-ssrf-rfi-Um7wT8Ew)


📈 23.12 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco TelePresence Conductor up to XC4.3.3 Web Interface Server-Side Request Forgery


📈 21.98 Punkte
🕵️ Sicherheitslücken

🕵️ Glasgow Interface Explorer: First fully open source FPGA based digital interface tool, allows you to decode, probe, and reverse engineer nearly any digital interface from Python


📈 21.93 Punkte
🕵️ Reverse Engineering

matomo
•