EUVD-2020-24604

Malware in sbrugna...

EUVD-2021-6863

Malicious code in bioql PyPI...

EUVD-2021-6860

Malicious code in bioql PyPI...

Cisco Application Services Engine Unauthorized Access Vulnerabilities (cisco-sa-case-mvuln-dYrDPC6w)

According to its self-reported version, Cisco Application Services Engine affected by multiple Unauthorized Access Vulnerabilities. - A vulnerability in Cisco Application Services Engine could allow an unauthenticated, remote attacker to access a privileged service on an affected device. The...

Cisco Application Services Engine Unauthorized Access Vulnerability (CNVD-2021-12827)

Cisco Application Services Engine provides a common platform for deploying Cisco data center applications. An unauthorized access vulnerability exists in Cisco Application Services Engine 1.13d and earlier versions, which can be exploited by a remote, unauthenticated attacker to elevate access to...

CVE-2021-1396 Cisco Application Services Engine Unauthorized Access Vulnerabilities

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about the...

CVE-2021-1396

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about the...

PT-2021-2191

Name of the Vulnerable Software and Affected Versions: Cisco Application Services Engine affected versions not specified Description: The issue is related to multiple vulnerabilities in Cisco Application Services Engine. An unauthenticated, remote attacker could gain privileged access to host-lev...

CVE-2021-1396: Missing Authentication for Critical Function

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about the...

CVE-2021-1393: Missing Authentication for Critical Function

Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about the...

PT-2021-2192

Name of the Vulnerable Software and Affected Versions: Cisco Application Services Engine affected versions not specified Description: The issue is related to multiple vulnerabilities in Cisco Application Services Engine that could allow an unauthenticated, remote attacker to gain privileged acces...

CVE-2020-3333

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could...

CVE-2020-3335: Missing Authentication for Critical Function

A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vulnerability is due to insufficient authorization limitations. An attacker could exploit this...

PT-2020-2899

Name of the Vulnerable Software and Affected Versions Cisco Application Services Engine Software affected versions not specified Description A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of...

PT-2020-2901

Name of the Vulnerable Software and Affected Versions Cisco Application Services Engine Software affected versions not specified Description The issue is related to insufficient authentication in the API of the software, allowing an unauthenticated, remote attacker to update event policies on an...

CVE-2020-3333: Missing Authentication for Critical Function

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify policies on an affected device. An attacker could...