Page 28 of 280 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2020-15336

https://notcve.org/view.php?id=CVE-2020-15336

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests. Zyxel CloudCNM SecuManager versiones 3.1.0 y 3.1.1, no posee autenticación para peticiones /cnr • https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html#xmpp-no-auth-cleartext https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml • CWE-306: Missing Authentication for Critical Function •

CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 1

CVE-2020-15337

https://notcve.org/view.php?id=CVE-2020-15337

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /registerCpe requests. Zyxel CloudCNM SecuManager versiones 3.1.0 y 3.1.1, presenta un problema de "Uso del Método de Solicitud GET con Cadenas de Consulta Confidenciales" para las peticiones /registerCpe • https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml • CWE-862: Missing Authorization •

CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 1

CVE-2020-15338

https://notcve.org/view.php?id=CVE-2020-15338

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request Method With Sensitive Query Strings" issue for /cnr requests. Zyxel CloudCNM SecuManager versiones 3.1.0 y 3.1.1, presenta un problema de "Uso del Método de Solicitud GET con Cadenas de Consulta Confidenciales" para las peticiones /cnr • https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml • CWE-862: Missing Authorization •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 1

CVE-2020-15339

https://notcve.org/view.php?id=CVE-2020-15339

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS. Zyxel CloudCNM SecuManager versiones 3.1.0 y 3.1.1, permite live/CPEManager/AXCampaignManager/handle_campaign_script_link?script_name= XSS • https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1

CVE-2020-15340

https://notcve.org/view.php?id=CVE-2020-15340

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa SSH key. Zyxel CloudCNM SecuManager versiones 3.1.0 y 3.1.1, presenta una clave SSH embebida en opt/axess/AXAssets/default_axess/axess/TR69/Handlers/turbolink/sshkeys/id_rsa • https://pierrekim.github.io/blog/2020-03-09-zyxel-secumanager-0day-vulnerabilities.html https://www.zyxel.com/support/vulnerabilities-of-CloudCNM-SecuManager.shtml • CWE-311: Missing Encryption of Sensitive Data •