Lucene search
+L

7025 matches found

Vulnrichment
Vulnrichment
•added 2021/05/22 6:40 a.m.•20 views

CVE-2021-1554 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

4.7CVSS8.3AI score0.01577EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/05/22 6:40 a.m.•35 views

CVE-2021-1553 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

4.7CVSS7.8AI score0.0166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/05/22 6:40 a.m.•18 views

CVE-2021-1553 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

4.7CVSS8.3AI score0.0166EPSS
SaveExploits0References1
CVE
CVE
•added 2021/05/22 6:40 a.m.•105 views

CVE-2021-1552

Cisco Small Business 100/300/500 Series Wireless Access Points expose input-validation based command-injection vulnerabilities in the web-based management interface. An authenticated attacker with admin credentials can send crafted HTTP requests to execute arbitrary commands with root privileges ...

9CVSS6.6AI score0.0166EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/05/22 6:40 a.m.•17 views

CVE-2021-1552 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

4.7CVSS8.3AI score0.0166EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/05/22 6:40 a.m.•37 views

CVE-2021-1551 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

4.7CVSS7.8AI score0.0166EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/05/22 6:40 a.m.•18 views

CVE-2021-1551 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

4.7CVSS8.3AI score0.0166EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/05/22 6:40 a.m.•44 views

CVE-2021-1550 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

4.7CVSS7.8AI score0.0166EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/22 12:00 a.m.•10 views

CVE-2021-1547: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

9CVSS6.4AI score0.01577EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/05/21 12:00 a.m.•41 views

Cisco Email Security Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is included in HTTP...

6.5CVSS6.6AI score0.01003EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2021/05/21 12:00 a.m.•37 views

Cisco Content Security Management Appliance Information Disclosure (cisco-sa-esa-wsa-sma-info-gY2AEz2H)

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance SMA could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is...

6.5CVSS6.6AI score0.01003EPSS
SaveExploits0References15
CNVD
CNVD
•added 2021/05/20 12:00 a.m.•26 views

Cisco Finesse Open Redirect Vulnerability

Cisco Finesse is a next-generation seat and supervisor desktop designed to provide a collaborative experience for the diverse communities that interact with your customer service organization. An open redirection vulnerability exists in the Web management interface of Cisco Finesse 12.61 and...

6.1CVSS6.5AI score0.00783EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/05/19 12:00 a.m.•20 views

Oracle E-Business Suite Change Management Unauthorized Access

The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

8.5CVSS6.9AI score0.00931EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/19 12:00 a.m.•17 views

Enterprise Manager FMW Control Plugin DoS

The vulnerability of the FMW Control Plugin sub-component of the Enterprise Manager for Fusion Middleware software from Oracle exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures through HTTP requests...

6.8CVSS7AI score0.00915EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/05/19 12:00 a.m.•20 views

Core server component Oracle WebLogic Server Data Modification DoS

The vulnerability of the Core server component of Oracle WebLogic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data through HTTP requests...

6.5CVSS6.9AI score0.01297EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/19 12:00 a.m.•6 views

PT-2021-3073

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...

9CVSS0.01577EPSS
SaveExploits0References5
NVD
NVD
•added 2021/05/17 5:15 p.m.•31 views

CVE-2021-32455

SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...

6.8CVSS0.00357EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/05/17 4:30 p.m.•40 views

CVE-2021-32455 SITEL CAP/PRX vulnerable to a denial of service attack

SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...

6.8CVSS6.7AI score0.00357EPSS
SaveExploits0References1
CVE
CVE
•added 2021/05/17 4:30 p.m.•76 views

CVE-2021-32455

CVE-2021-32455 affects SITEL CAP/PRX firmware version 5.2.01. Affected component: firmware running on SITEL CAP/PRX devices. Root cause described as a resource/handling issue that allows an attacker with access to the device network to trigger a denial-of-service condition by sending HTTP request...

6.8CVSS6.3AI score0.00357EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/17 12:00 a.m.•16 views

CVE-2021-32455: Uncontrolled Resource Consumption

SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively...

6.8CVSS5.8AI score0.00357EPSS
SaveExploits0References3
Rows per page
Query Builder