Lucene search
+L

131 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2021-7046

Malicious code in bioql PyPI...

9CVSS8.6AI score0.02125EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2021-7044

Malicious code in bioql PyPI...

9.1CVSS9.2AI score0.01303EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.17 views

EUVD-2021-7049

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00599EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:27 a.m.18 views

CVE-2024-20478

A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller APIC and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authenticated, remote attacker with Administrator-level privileges to install a modified software image, leadi...

7.2CVSS8AI score0.0074EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:27 a.m.11 views

CVE-2024-20279

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service QoS policies, on an affected system. This...

4.3CVSS7AI score0.00319EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:03 a.m.14 views

CVE-2010-2824

Unspecified vulnerability on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service device reload via a sequence of...

7.8CVSS6.9AI score0.01763EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:02 a.m.15 views

CVE-2010-2822

Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine ACE Module with software before A23.2 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710 appliance with software before A32.6, allows remote...

7.8CVSS7AI score0.01763EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:45 a.m.16 views

CVE-2010-2825

Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine ACE Module with software A21.x before A21.6, A22.x before A22.3, and A23.x before A23.1 for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine ACE 4710...

7.8CVSS7AI score0.01205EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 11:55 p.m.19 views

CVE-2009-0616

Cisco Application Networking Manager ANM before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."...

10CVSS7AI score0.02146EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:37 p.m.18 views

CVE-2009-0618

Unspecified vulnerability in the Java agent in Cisco Application Networking Manager ANM before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service service outage by stopping processes, or obtain sensitive information by reading configuration files...

8.5CVSS7.2AI score0.02515EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:36 p.m.19 views

CVE-2009-0617

Cisco Application Networking Manager ANM before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files...

10CVSS7.9AI score0.02146EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:36 p.m.19 views

CVE-2009-0615

Directory traversal vulnerability in Cisco Application Networking Manager ANM before 2.0 and Application Control Engine ACE Device Manager before A32.1 allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."...

9CVSS6.6AI score0.02035EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/05/18 12:00 a.m.13 views

The vulnerability in the web interface of the Cisco Application Policy Infrastructure Controller allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS5.2AI score0.00282EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/18 12:00 a.m.11 views

The vulnerability of the Command Line Interface (CLI) of the Cisco Application Policy Infrastructure Controller, which allows a attacker to disclose protected information

The vulnerability of the Command Line Interface CLI of the Cisco Application Policy Infrastructure Controller management tool is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information...

4.6CVSS5.6AI score0.00156EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/07 6:15 p.m.17 views

CVE-2025-20196

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service DoS condition. This...

5.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/03 12:00 a.m.18 views

Command Injection Vulnerability in Cisco Application Policy Infrastructure Controller CLI

Cisco Application Policy Infrastructure Controller is a software for Cisco ACI switching matrix automation and management from Cisco. A command injection vulnerability exists in the Cisco Application Policy Infrastructure Controller CLI, which can be exploited by an attacker to submit a special...

6.7CVSS8AI score0.00187EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/03/03 12:00 a.m.16 views

Cisco Application Policy Infrastructure Controller Cross-Site Scripting Vulnerability

Cisco Application Policy Infrastructure Controller is a software for Cisco ACI switching matrix automation and management from Cisco. The Cisco Application Policy Infrastructure Controller suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject malicious...

4.8CVSS5.8AI score0.00282EPSS
SaveExploits0References1
Circl
Circl
added 2025/02/26 5:24 p.m.15 views

CVE-2025-20119

creationtimestamp| type| source ---|---|--- 2025-02-26 17:24:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5542 2025-02-26 19:24:28+00:00| seen| https://threatintel.cc/2025/02/26/cve-cisco-application-policy-infrastructure.html 2025-02-26 20:08:13+00:00| seen| https://t.me/cvedetector/189...

6CVSS4.8AI score0.001EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/26 5:15 p.m.11 views

CVE-2025-20117

A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due t...

6.7CVSS6AI score0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/26 4:23 p.m.7 views

CVE-2025-20119 Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability

A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is du...

6CVSS5.9AI score0.001EPSS
SaveExploits0References1
Rows per page
Query Builder