Lucene search
+L

78285 matches found

NVD
NVD
added 2026/06/03 6:16 p.m.16 views

CVE-2026-20175

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input...

6.1CVSS0.0018EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/03 4:09 p.m.84 views

CVE-2026-20230

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability ...

8.6CVSS7.6AI score0.882EPSS
SaveIn wildExploits3References2Affected Software1
CVE
CVE
added 2026/06/03 4:09 p.m.201 views

CVE-2026-20230

CVE-2026-20230 affects Cisco Unified Communications Manager (CUCM) and Unified CM SME. The issue is due to improper input validation in specific HTTP requests, enabling an unauthenticated attacker to perform server-side request forgery (SSRF) and, if exploited, write files on the OS that could be...

8.6CVSS7.6AI score0.882EPSS
SaveIn wildExploits3References3Affected Software1
EUVD
EUVD
added 2026/06/03 4:09 p.m.25 views

EUVD-2026-34137

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability ...

8.6CVSS5.8AI score0.882EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2026/06/03 4:06 p.m.30 views

CVE-2026-20175 Cisco Finesse File Inclusion Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input...

6.1CVSS6.1AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/03 4:06 p.m.48 views

CVE-2026-20175

CVE-2026-20175 – Cisco Finesse remote file inclusion vulnerability. An unauthenticated, remote attacker can load arbitrary files into an active user session by sending a crafted HTTP request, potentially enabling browser‑based attacks and execution of script code or access to sensitive informatio...

6.1CVSS6.1AI score0.0018EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/03 4:06 p.m.28 views

EUVD-2026-34136

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input...

6.1CVSS6.1AI score0.0018EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/03 4:06 p.m.11 views

CVE-2026-20175

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input...

6.1CVSS6.1AI score0.0018EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/03 4:06 p.m.57 views

CVE-2026-20175 Cisco Finesse File Inclusion Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input...

6.1CVSS0.0018EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/06/03 4:00 p.m.25 views

Cisco Finesse Remote File Inclusion Vulnerability

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input...

6.1CVSS6.1AI score0.0018EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/06/03 4:00 p.m.65 views

Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability ...

8.6CVSS5.8AI score0.882EPSS
SaveExploits3References1
Circl
Circl
added 2026/06/03 12:22 p.m.18 views

CVE-2026-20230

creationtimestamp| type| source ---|---|--- 2026-06-03 12:22:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-547 2026-06-03 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1899 2026-06-03 23:03:34+00:00| seen|...

8.6CVSS8.5AI score0.882EPSS
SaveExploits3References166
Positive Technologies
Positive Technologies
added 2026/06/03 12:00 a.m.76 views

PT-2026-45987

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions prior to 14SU6 Cisco Unified Communications Manager versions prior to 15SU5 Cisco Unified Communications Manager Session Management Edition affected versions not specified Description An...

8.6CVSS8.7AI score0.882EPSS
SaveExploits3References194
Positive Technologies
Positive Technologies
added 2026/06/03 12:00 a.m.25 views

PT-2026-45986

Name of the Vulnerable Software and Affected Versions Cisco Finesse affected versions not specified Description Insufficient validation of user-supplied input for HTTP requests allows an unauthenticated remote attacker to load arbitrary files from remote locations into an active user session. An...

6.1CVSS6.1AI score0.0018EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/03 12:00 a.m.26 views

Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings is a web-based product that provides online meetings, video conferencing, and collaboration features. Cisco Webex Meetings has a cross-site scripting vulnerability. This vulnerability stems from insufficient validation of user input. An attacker can exploit this vulnerability...

6.1CVSS6.6AI score0.00184EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/03 12:00 a.m.27 views

Cisco Finesse 安全漏洞

Cisco Finesse is a call center management software developed by the American company Cisco. There is a security vulnerability in Cisco Finesse, which stems from insufficient validation of HTTP request inputs provided to users. This vulnerability could allow unauthorized remote attackers to load...

6.1CVSS5.4AI score0.0018EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/03 12:00 a.m.18 views

Cisco Unified Communications Manager 代码问题漏洞

Cisco Unified Communications Manager is a call processing component within the unified communication system developed by Cisco, Inc. This component provides an scalable, distributed, and highly available solution for enterprise IP telephony call processing. There is a code vulnerability in Cisco...

8.6CVSS6AI score0.882EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2026/05/31 12:00 a.m.40 views

PT-2026-45209

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An out-of-bounds read can occur in the iavb parse key data function within avb rsa.c due to improper input validation. This issue allows for local information...

3.3CVSS5.5AI score0.00069EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.15 views

PT-2026-45139

CVE-2026-45611 - Cisco Router Authentication Bypass CVE ID :CVE-2026-45611 Published : May 29, 2026, 1:16 p.m. | 1 hour, 13 minutes ago Description :Rejected reason: Further research determined the issue is not a vulnerability. Severity: 0.0 | NA Visit the link for more details, such as CVSS...

5.8AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/05/26 6:10 p.m.127 views

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20182 Cisco Catalyst SD-WAN Peering Authentication By...

10CVSS5.9AI score0.91522EPSS
SaveExploits4
Rows per page
Query Builder