Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2018-20687
Disclosure Date: November 18, 2019 (last updated November 27, 2024)
An XML external entity (XXE) vulnerability in CommandCenterWebServices/.*?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
0
Attacker Value
Unknown
CVE-2014-9095
Disclosure Date: November 26, 2014 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) sort or (2) dir parameter to license/records.
0
Attacker Value
Unknown
CVE-2014-3901
Disclosure Date: August 12, 2014 (last updated October 05, 2023)
Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service (device hang) via a crafted packet.
0
Attacker Value
Unknown
CVE-2014-2955
Disclosure Date: July 14, 2014 (last updated October 05, 2023)
Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.
0
Attacker Value
Unknown
CVE-2005-2136
Disclosure Date: July 05, 2005 (last updated February 22, 2025)
Raritan Dominion SX (DSX) Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set (1) world-readable permissions for /etc/shadow and (2) world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users.
0
