10 matches found
EUVD-2018-1228
Malware in sbrugna...
EUVD-2018-1227
Malware in sbrugna...
EUVD-2015-6261
Malware in sbrugna...
The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows a intruder to disclose or modify protected information.
The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...
CVE-2018-0404: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information...
The vulnerability of the microprogramming software used in Cisco RV220W network switches allows attackers to execute arbitrary SQL commands.
The vulnerability of the web interface for managing microprogramming software on the Cisco RV220W network switch is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially...
Cisco RV220W SQL Injection Vulnerability
The Cisco RV220W is a wireless VPN firewall router product from Cisco. A SQL injection vulnerability exists in the web-based management interface of the Cisco RV220W, which can be exploited by remote attackers to submit a specially crafted SQL query to manipulate or obtain database data...
CVE-2015-6319
CVE-2015-6319 affects Cisco RV220W devices. A vulnerability in the web-based management interface arises from insufficient input validation of HTTP request headers, allowing remote attackers to submit crafted SQL statements that are processed by the device’s database. The result is an SQL injecti...
CVE-2015-6319: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574...