Lucene search
+L

54 matches found

CNVD
CNVD
added 2020/08/20 12:0 a.m.16 views

Cisco Vision Dynamic Signage Director Web Management Interface Misconfiguration Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. A misconfiguration vulnerability exists in the Web management interface in Cisco Vision Dynamic Signage Director versions prior to 6.2 SP5, which stems from incorrect permissions in the Apache...

5.3CVSS6.8AI score0.01095EPSS
Exploits0References1
Cisco
Cisco
added 2020/08/19 4:0 p.m.51 views

Cisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The vulnerability exists...

5.5CVSS5AI score0.00617EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/21 12:0 a.m.8 views

The vulnerability in the web interface of the Cisco Vision Dynamic Signage Director system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco Vision Dynamic Signage Director web interface management interface is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.8CVSS5.7AI score0.01021EPSS
Exploits0References3
Prion
Prion
added 2020/07/16 6:15 p.m.19 views

Sql injection

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

4CVSS5.5AI score0.01021EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/07/16 5:35 p.m.24 views

CVE-2020-3450 Cisco Vision Dynamic Signage Director SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

4.9CVSS5.5AI score0.01021EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/07/16 5:35 p.m.8 views

CVE-2020-3450 Cisco Vision Dynamic Signage Director SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted...

4.9CVSS7.4AI score0.01021EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.5 views

The vulnerability of the REST API interface implementation of the Cisco Vision Dynamic Signage Director digital content management system allows a hacker to gain access to certain parts of the application’s software interface.

The vulnerability of the REST API interface of the Cisco Vision Dynamic Signage Director digital content management system is related to the failure of authentication. Exploiting this vulnerability may allow a malicious actor to gain access to certain parts of the application’s software interface...

6.5CVSS6.5AI score0.01027EPSS
Exploits0References2
Symantec
Symantec
added 2020/01/08 12:0 a.m.32 views

Cisco Vision Dynamic Signage Director CVE-2019-16004 Authentication Bypass Vulnerability

Description Cisco Vision Dynamic Signage Director is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions with administrative privileges. This may lead to further attacks. This issue is being tracke...

1.9AI score0.01027EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.7 views

The vulnerability of the REST API interface of the Cisco Vision Dynamic Signage Director system allows a hacker to bypass authentication procedures and execute arbitrary code with administrator privileges.

The vulnerability of the REST API interface of the Cisco Vision Dynamic Signage Director system is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and execute arbitrary code with administrator privileges using...

9.4CVSS5.9AI score0.0534EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2019/07/17 9:15 p.m.6 views

CVE-2019-1917

A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by...

9.8CVSS7.5AI score0.0534EPSS
Exploits0References2
NVD
NVD
added 2019/07/17 9:15 p.m.10 views

CVE-2019-1917

A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by...

10CVSS9.7AI score0.0534EPSS
Exploits0References2
Prion
Prion
added 2019/07/17 9:15 p.m.14 views

Authentication flaw

A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by...

10CVSS9.7AI score0.0534EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2019/07/17 8:15 p.m.9 views

CVE-2019-1917 Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability

A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by...

9.1CVSS8.2AI score0.0534EPSS
Exploits0References2
Cisco
Cisco
added 2019/07/17 4:0 p.m.126 views

Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability

A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by...

9.1CVSS1.9AI score0.0534EPSS
Exploits0References1
Rows per page
Query Builder