10 matches found
EUVD-2015-0669
Malware in sbrugna...
Cisco Network Analysis Module Detection Consolidation
Consolidation of Cisco Network Analysis Module detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc";...
Directory traversal
A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...
CVE-2017-12285
A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...
PT-2017-12459
Name of the Vulnerable Software and Affected Versions Cisco Network Analysis Module Software affected versions not specified Description The issue allows an unauthenticated, remote attacker to delete arbitrary files from an affected system due to a lack of proper input validation of HTTP requests...
CVE-2017-12285: Improper Input Validation
A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...
Cisco Network Analysis Module Parameter Directory Traversal Arbitrary File Deletion Vulnerability
A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that i...
CVE-2016-1388
Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...
CVE-2015-0656: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the login page in Cisco Network Analysis Module NAM allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCum81269...
PT-2015-4783
Name of the Vulnerable Software and Affected Versions Cisco Network Analysis Module NAM affected versions not specified Description A cross-site scripting XSS issue in the login page of Cisco Network Analysis Module NAM allows remote attackers to inject arbitrary web script or HTML. This can be...