Lucene search
+L

463 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.23 views

Cisco Data Center Network Manager getCustomPGStatList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.5AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.21 views

Cisco Data Center Network Manager getZoneListByZoneNameAndParentId SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.5AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.21 views

Cisco Data Center Network Manager getLanGigEStatList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.2AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.33 views

Cisco Data Center Network Manager getEndPortConnectionsForStorageSystem SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.9AI score0.03304EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.22 views

Cisco Data Center Network Manager getNpvLinkStatJoinList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.9AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.20 views

Cisco Data Center Network Manager getLanIslStatList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.31 views

Cisco Data Center Network Manager getHostEnclList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.1AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.22 views

Cisco Data Center Network Manager getModulesBySwitch SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.28 views

Cisco Data Center Network Manager getLanIslStatListES SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.4AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.21 views

Cisco Data Center Network Manager getDeployerTaskDetails SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.1AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.31 views

Cisco Data Center Network Manager getBackupStatusCount SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.9AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.34 views

Cisco Data Center Network Manager TrustedClientTokenValidator Hard-coded Cryptographic Key Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Data Center Network Manager. The specific flaw exists within the processing of the dbadmin/addUser functionality. The issue results from trusting input that has been encrypted with a hard-coded...

9.8CVSS1.8AI score0.96455EPSS
SaveExploits7References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.24 views

Cisco Data Center Network Manager getHostEnclDataLength SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.4AI score0.46935EPSS
SaveExploits10References1
CNVD
CNVD
added 2020/01/03 12:00 a.m.19 views

Cisco Data Center Network Manager JBoss EAP Unauthorized Access Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A JBoss EAP unauthorized access vulnerability exists in Cisco Data Center Network...

6.3CVSS7.1AI score0.03647EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.27 views

Cisco Data Center Network Manager getLanSwitchListWithoutUsedPorts SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.2AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.22 views

Cisco Data Center Network Manager getJobList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.31 views

Cisco Data Center Network Manager getVmHostData SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.31 views

Cisco Data Center Network Manager getPortGroupMember SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.7AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.39 views

Cisco Data Center Network Manager serverinfo Hardcoded Password Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of web requests. The system contains a hard-cod...

7.5CVSS1.3AI score0.3811EPSS
SaveExploits5References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.25 views

Cisco Data Center Network Manager ReportWS deleteReportTemplate Directory Traversal Denial-of-Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SOAP...

7.1CVSS3AI score0.14322EPSS
SaveExploits0References1
Rows per page
Query Builder