CVE-2021-1538 Cisco Common Services Platform Collector Command Injection Vulnerability

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

CVE-2021-1538: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by...

PT-2021-7442

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC affected versions not specified Description A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to execute...

CVE-2019-1723

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

PT-2019-1546

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector versions 2.7.x through 2.7.4.5 Cisco Common Services Platform Collector versions 2.8.x through 2.8.1.1 Description The issue is related to a default user account with a static password in the Cisco Comm...

CVE-2019-1723: Use of Hard-coded Credentials

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

The vulnerability of the Qualcomm GPU operating system for Linux, allowing a hacker to execute arbitrary code

The vulnerability of the Common Internet Filesystem microprogramming system in Cisco Adaptive Security Appliances arises from insufficient validation of input data and the execution of operations outside the buffer in dynamic memory. Exploiting this vulnerability allows a malicious actor to perfo...

CVE-2015-0594

Cisco Common Services (used by Cisco Prime LAN Management Solution and Cisco Security Manager) contains cross-site scripting (XSS) vulnerabilities in the help pages. The root cause is insufficient input validation of some parameters used by the help page system, allowing remote attackers to trigg...

CVE-2015-0594: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution LMS and Cisco Security Manager, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuq54654 and...

PT-2015-4738

Name of the Vulnerable Software and Affected Versions Cisco Prime LAN Management Solution LMS affected versions not specified Cisco Security Manager affected versions not specified Cisco Common Services affected versions not specified Description The issue concerns multiple cross-site scripting X...

CVE-2013-5488

Cisco Common Services, as used in Cisco Prime LAN Management Solution LMS, Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service memory...

CVE-2013-5488: Improper Input Validation

Cisco Common Services, as used in Cisco Prime LAN Management Solution LMS, Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service memory...

PT-2013-5573

Name of the Vulnerable Software and Affected Versions Cisco Common Services affected versions not specified Description The issue is related to improper interaction with the ActiveMQ component, allowing remote attackers to cause a denial of service due to memory consumption via simultaneous TCP...