Lucene search
+L

7000 matches found

OSV
OSV
added 2022/08/10 9:15 a.m.9 views

CVE-2022-20816

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

8.1CVSS5.9AI score0.01237EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/10 9:15 a.m.30 views

Code injection

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

5.5CVSS7.9AI score0.01237EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/10 8:11 a.m.15 views

CVE-2022-20816 Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

6.5CVSS6.9AI score0.01237EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/10 8:11 a.m.147 views

CVE-2022-20816

CVE-2022-20816 involves Cisco Unified Communications Manager (CUCM) and Unified CM Session Management Edition (Unified CM SME). The issue is in the web-based management interface where requests are not properly validated, allowing an authenticated, remote attacker to delete arbitrary files by sen...

8.1CVSS6.9AI score0.01237EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/10 8:11 a.m.35 views

CVE-2022-20816 Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

6.5CVSS8.2AI score0.01237EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/08/08 12:00 a.m.13 views

The vulnerability of the web interfaces of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a perpetrator to delete arbitrary files.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition web interfaces is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete...

6.8CVSS7.5AI score0.01237EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2022/08/06 12:00 a.m.9 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google Inc. in the United States. A security vulnerability previously existed in Google Chrome version 97.0.4692.71, which stemmed from a post-release reuse issue in the WebRTC module...

9.6CVSS8.2AI score0.00662EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/08/03 11:00 p.m.7 views

CVE-2022-20816

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

8.1CVSS7.4AI score0.01237EPSS
SaveExploits0References2
Cisco
Cisco
added 2022/08/03 4:00 p.m.97 views

Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

6.5CVSS7.2AI score0.01237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/03 12:00 a.m.13 views

PT-2022-3982 · Cisco · Cisco Unified Communications Manager Session Management Edition +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager Unified CM versions affected versions not specified Cisco Unified Communications Manager Session Management Edition Unified CM SME versions affected versions not specified Description: A vulnerability in t...

8.1CVSS7.8AI score0.01237EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/03 12:00 a.m.12 views

Cisco Unified Communications Manager 路径遍历漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A path traversal vulnerability...

8.1CVSS7.9AI score0.01237EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/08/02 12:00 a.m.10 views

The vulnerability of the Billing Care component of Oracle Communications’ Billing and Revenue Management software allows a perpetrator to execute arbitrary codes.

The vulnerability of the Billing Care component of Oracle Communications’ Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

7.5CVSS8.1AI score0.01297EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/07/29 12:00 a.m.28 views

EulerOS 2.0 SP10 : gzip (EulerOS-SA-2022-2133)

According to the versions of the gzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Communications Cloud Native Core Unified Data Repository product of Oracle Communications component: UDR GNU Gzip. The...

8.8CVSS6.9AI score0.05036EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/07/29 12:00 a.m.200 views

EulerOS 2.0 SP10 : gzip (EulerOS-SA-2022-2158)

According to the versions of the gzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Communications Cloud Native Core Unified Data Repository product of Oracle Communications component: UDR GNU Gzip. The...

8.8CVSS6.9AI score0.05036EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/07/29 12:00 a.m.32 views

EulerOS 2.0 SP10 : xz (EulerOS-SA-2022-2149)

According to the versions of the xz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Communications Cloud Native Core Unified Data Repository product of Oracle Communications component: UDR GNU Gzip. The...

8.8CVSS6.9AI score0.05036EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/07/29 12:00 a.m.30 views

EulerOS 2.0 SP10 : xz (EulerOS-SA-2022-2174)

According to the versions of the xz packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Oracle Communications Cloud Native Core Unified Data Repository product of Oracle Communications component: UDR GNU Gzip. The...

8.8CVSS6.9AI score0.05036EPSS
SaveExploits0References2
OSV
OSV
added 2022/07/28 3:15 p.m.8 views

AZL-25645 CVE-2022-2553 affecting package booth for versions less than 1.0-8

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...

6.5CVSS5.7AI score0.01172EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/28 3:15 p.m.25 views

Authentication flaw

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...

6.4CVSS6.3AI score0.01172EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
added 2022/07/28 12:00 a.m.30 views

CVE-2022-2553

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster...

6.6AI score0.01172EPSS
SaveExploits0References4
NCSC
NCSC
added 2022/07/27 12:00 a.m.13 views

Vulnerabilities fixed in Emerson DeltaV

Emerson has fixed vulnerabilities in DeltaV products. A unauthenticated malicious person with network access can exploit the exploit the vulnerabilities to cause a denial-of-service. In addition, a local malicious party can exploit the vulnerabilities to execute arbitrary code and manipulating...

7.8CVSS7.2AI score0.00235EPSS
SaveExploits0
Rows per page
Query Builder