Lucene search
+L

519 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2021-31188

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.01137EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-35672

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00249EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/09/09 12:0 a.m.7 views

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

Cisco Integrated Management Controller IMC is a set of software used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down and restarting the server. A cross-site scripting vulnerability exists in Cisco...

5.4CVSS5.9AI score0.0022EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.5 views

Cisco Integrated Management Controller Virtual Keyboard Video Monitor Stored XSS (cisco-sa-ucs-kvmsxss-6h7AnUyk)

According to its self-reported version, Cisco Integrated Management Controller Virtual Keyboard Video Monitor Stored Cross-Site Scripting is affected by a vulnerability. - A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC...

5.4CVSS5.9AI score0.0022EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.10 views

CVE-2025-20342

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is...

5.4CVSS5.9AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:17 p.m.8 views

CVE-2025-20317

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An...

7.1CVSS6.7AI score0.00429EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/27 5:15 p.m.10 views

CVE-2025-20342

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is...

5.4CVSS0.0022EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/27 4:23 p.m.27 views

CVE-2025-20342 Cisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting Vulnerability

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is...

5.4CVSS0.0022EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/27 4:23 p.m.35 views

CVE-2025-20317

Cisco CVE-2025-20317 affects the Integrated Management Controller (IMC) and the vKVM component (also in Cisco UCS Manager). The issue is an open redirect caused by insufficient verification of vKVM endpoints, allowing an unauthenticated, remote attacker to persuade a user to click a crafted link ...

7.1CVSS6.6AI score0.00429EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/27 4:23 p.m.18 views

CVE-2025-20342

Cisco IMC vKVM stored XSS (CVE-2025-20342) arises from insufficient input validation in the web-based management interface. An authenticated user with vKVM privileges can inject code via a data field, potentially executing script in the interface context or exposing browser data. Affected product...

5.4CVSS5.7AI score0.0022EPSS
SaveExploits0References1
Cisco
Cisco
added 2025/08/27 4:0 p.m.9 views

Cisco Integrated Management Controller Virtual Keyboard Video Monitor Open Redirect Vulnerability

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An...

7.1CVSS7.1AI score0.00429EPSS
SaveExploits0References1
Cisco
Cisco
added 2025/08/27 4:0 p.m.12 views

Cisco Integrated Management Controller Virtual Keyboard Video Monitor Stored Cross-Site Scripting Vulnerability

A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with low privileges to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is...

5.4CVSS6AI score0.0022EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.9 views

Cisco Integrated Management Controller 安全漏洞

Cisco Integrated Management Controller IMC is a set of software used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down and restarting the server. A cross-site scripting vulnerability exists in Cisco...

5.4CVSS6AI score0.0022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.8 views

PT-2025-34894

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC affected versions not specified Description: A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling could allow an unauthenticated, remote attacker to redirect a user to a...

7.1CVSS6.4AI score0.00429EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.16 views

Cisco Integrated Management Controller 输入验证错误漏洞

Cisco Integrated Management Controller IMC is a set of software used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down and restarting the server. An input validation error vulnerability exists in Cisco...

7.1CVSS7.2AI score0.00429EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.8 views

Dahua Smart Park Integrated Management Platform 安全漏洞

Dahua Smart Park Integrated Management Platform is a park management platform from Dahua China. A security vulnerability exists in Dahua Smart Park Integrated Management Platform that originates from path traversal and could lead to remote code execution...

10CVSS7.8AI score0.00813EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.10 views

PT-2025-34895 · Cisco · Cisco Ucs Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC affected versions not specified Description: A vulnerability in the Virtual Keyboard Video Monitor vKVM connection handling of Cisco Integrated Management Controller IMC could allow an authenticated,...

5.4CVSS5.3AI score0.0022EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/06/06 5:21 p.m.8 views

CVE-2025-20261

A vulnerability in the SSH connection handling of Cisco Integrated Management Controller IMC for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated privileges. This vulnerability is due t...

8.8CVSS7.2AI score0.00404EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/06/06 12:0 a.m.9 views

Cisco Integrated Management Controller Privilege Escalation (cisco-sa-ucs-ssh-priv-esc-2mZDtdjM)

According to its self-reported version, Cisco Integrated Management Controller Privilege Escalation is affected by a vulnerability. - A vulnerability in the SSH connection handling of Cisco Integrated Management Controller IMC for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series...

8.8CVSS5.7AI score0.00404EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2025/06/04 5:15 p.m.6 views

CVE-2025-20261

A vulnerability in the SSH connection handling of Cisco Integrated Management Controller IMC for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated privileges. This vulnerability is due t...

8.8CVSS5.9AI score0.00404EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder