Lucene search
+L

858 matches found

CNNVD
CNNVD
added 2021/08/24 12:00 a.m.7 views

NASCENT RemKon Device Manager 代码问题漏洞

NASCENT RemKon Device Manager is an automated access control system solution. A remote code execution vulnerability exists in NASCENT RemKon Device Manager version 4.0.0.0, which stems from the asset/index.php image upload function in the software, which does not effectively restrict or validate...

10CVSS9.2AI score0.04549EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2021/08/12 12:00 a.m.38 views

Cisco Firepower Device Manager On-Box Software RCE (cisco-sa-fdm-rce-Rx6vVurq)

According to its self-reported version, Cisco Firepower Device Manager FDM On-Box software is affected by a vulnerability in the REST API that allows an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to...

9CVSS8.6AI score0.01867EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/08/03 12:00 a.m.15 views

The vulnerability of the REST API implementation in software for managing Cisco Firepower Device Manager On-Box allows a attacker to execute arbitrary code or perform arbitrary commands.

The vulnerability of the REST API implementation in software for managing Cisco Firepower Device Manager On-Box is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or run arbitrary code using a specially crafted HTTP request...

7.5CVSS8.1AI score0.01867EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/07/22 4:15 p.m.17 views

CVE-2021-1518

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...

9CVSS0.01867EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/07/22 3:20 p.m.15 views

CVE-2021-1518 Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...

6.3CVSS7.6AI score0.01867EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/22 3:20 p.m.29 views

CVE-2021-1518 Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...

6.3CVSS8.9AI score0.01867EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/21 11:00 p.m.6 views

CVE-2021-1518

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...

9CVSS7.5AI score0.01867EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/07/21 4:00 p.m.84 views

Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific...

6.3CVSS7.7AI score0.01867EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/21 12:00 a.m.26 views

Cisco Firepower Device Manager 代码注入漏洞

Cisco Firepower Device Manager FDM is a firewall device manager from Cisco USA. The product supports access rule configuration, system monitoring, and other functions. A code injection vulnerability exists in Cisco Firepower Device Manager, which can be exploited by an authenticated, remote...

9CVSS8.6AI score0.01867EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:00 a.m.9 views

The vulnerability of the ASDM Launcher, a tool for managing Cisco Adaptive Security Device Manager (ASDM) network interfaces, allows a hacker to execute arbitrary code.

The vulnerability of the ASDM Launcher, the application for managing Cisco Adaptive Security Device Manager switches, is related to improper code generation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

9.3CVSS8.2AI score0.19958EPSS
SaveExploits2References4
Ubuntu
Ubuntu
added 2021/06/04 7:04 p.m.255 views

USN-4979-1: Linux kernel vulnerabilities

Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service system crash. CVE-2020-25670 Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel did n...

8.8CVSS7.6AI score0.03132EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:00 a.m.17 views

The vulnerability of the REST API interface of the Cisco Firepower Device Manager On-Box software allows a hacker to trigger a maintenance failure.

The vulnerability of the REST API interface of the Cisco Firepower Device Manager On-Box software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to trigger service failure remotely...

5.5CVSS5.9AI score0.0098EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/05/08 12:00 a.m.6 views

Unauthorized Access Vulnerability in Enterprise Device Manager

Avaya, formerly known as Lucent Technologies Enterprise Networking Division and headquartered in New Jersey, USA, officially became an independent, publicly traded company on October 1, 2000 ... An unauthorized access vulnerability exists in Enterprise Device Manager, which could be exploited by ...

6.8AI score
SaveExploits0
OSV
OSV
added 2021/04/29 6:15 p.m.9 views

CVE-2021-1369

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity XXE...

5.4CVSS5.8AI score0.0098EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/29 6:15 p.m.21 views

Design/Logic Flaw

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

6.8CVSS6.5AI score0.01184EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/04/29 5:31 p.m.10 views

CVE-2021-1489 Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

4.9CVSS7AI score0.01184EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/29 5:31 p.m.60 views

CVE-2021-1489

CVE-2021-1489 affects Cisco Firepower Device Manager (FDM). A vulnerability in filesystem usage management allows an authenticated, remote attacker to exhaust filesystem resources by uploading files, leading to a DoS and possible database errors with the device becoming unresponsive to web manage...

6.8CVSS5.5AI score0.01184EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/29 5:30 p.m.36 views

CVE-2021-1369 Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity XXE...

5.4CVSS5.9AI score0.0098EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/04/29 5:30 p.m.11 views

CVE-2021-1369 Cisco Firepower Device Manager On-Box Software XML External Entity Vulnerability

A vulnerability in the REST API of Cisco Firepower Device Manager FDM On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity XXE...

5.4CVSS6.8AI score0.0098EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/04/28 4:00 p.m.75 views

Cisco Firepower Device Manager Software Filesystem Space Exhaustion Denial of Service Vulnerability

A vulnerability in filesystem usage management for Cisco Firepower Device Manager FDM Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service DoS condition on an affected device. This vulnerability is due to the insufficient...

4.9CVSS5.8AI score0.01184EPSS
SaveExploits0References1
Rows per page
Query Builder