Lucene search
+L

682 matches found

OSV
OSV
•added 2021/05/06 1:15 p.m.•20 views

CVE-2021-1397

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An...

6.1CVSS6.4AI score0.00831EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2021/05/06 12:42 p.m.•17 views

CVE-2021-1397 Cisco Integrated Management Controller Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An...

4.7CVSS6.8AI score0.00831EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/05/06 12:42 p.m.•36 views

CVE-2021-1397 Cisco Integrated Management Controller Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An...

4.7CVSS6.4AI score0.00831EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/05/06 12:00 a.m.•48 views

Cisco Integrated Management Controller Open Redirect Vulnerability (CNVD-2021-37694)

Cisco Integrated Management Controller IMC is a U.S. Cisco Cisco for server management monitoring integrated management software. An open redirection vulnerability exists in Cisco Integrated Management Controller, which can be exploited by remote attackers to redirect users to a malicious web pag...

6.1CVSS6.8AI score0.00831EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•6 views

CVE-2021-1397: URL Redirection to Untrusted Site

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An...

6.1CVSS5.9AI score0.00831EPSS
SaveExploits0References2
Cisco
Cisco
•added 2021/05/05 4:00 p.m.•106 views

Cisco Integrated Management Controller Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An...

4.7CVSS5.4AI score0.00831EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/05 12:00 a.m.•2 views

PT-2021-3254

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to redirect a user to a malicious web page du...

6.1CVSS0.00831EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/05/05 12:00 a.m.•15 views

Cisco Integrated Management Controller 输入验证错误漏洞

Cisco Integrated Management Controller IMC is a U.S. Cisco Cisco for server management monitoring integrated management software. An open redirection vulnerability exists in Cisco Integrated Management Controller, which can be exploited by remote attackers to redirect users to a malicious web pag...

6.1CVSS5.8AI score0.00831EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/04/11 12:00 a.m.•7 views

Weak Password Vulnerability in Bioventa V5000 (CNVD-2021-30891)

Based on hybrid biometrics technology, BioRadar V5000 integrates multiple sub-systems such as personnel, access control, time & attendance, consumption, ladder control, visitor, parking, patrol, video, ID card, information screen, face perception, channel and system management, providing an...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2021/03/29 12:00 a.m.•12 views

SQL Injection Vulnerability in General Library Integrated Management System GLIS of Beijing Qingda Xinyang Technology Co.

General Library Integrated Management System GLIS is a completely B / S architecture system, object-oriented programming technology, more advanced technology, resources are easier to share and remote maintenance of the library under the open Web platform for integrated business management network...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2021/03/24 12:00 a.m.•13 views

Unauthorized Access Vulnerability in GLIS, a General Library Integrated Management System (GLIMS) of Tsinghua University Xinyang

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2021/03/24 12:00 a.m.•10 views

Catalog Traversal Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Information Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/03 12:00 a.m.•7 views

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70801)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/03 12:00 a.m.•17 views

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70798)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/11/19 12:00 a.m.•15 views

Cisco Integrated Management Controller Remote Code Execution Vulnerability

The Cisco Integrated Management Controller IMC is a baseboard management controller that provides embedded server management for Cisco UCS C-Series rackmount servers and Cisco S-Series storage servers. A remote code execution vulnerability exists in the API subsystem of the Cisco Integrated...

10CVSS8.5AI score0.04798EPSS
SaveExploits0References1
OSV
OSV
•added 2020/11/18 7:15 p.m.•14 views

CVE-2020-3470

Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could...

9.8CVSS7.8AI score0.04798EPSS
SaveExploits0References1
NVD
NVD
•added 2020/11/18 7:15 p.m.•27 views

CVE-2020-3470

Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could...

10CVSS10AI score0.04798EPSS
SaveExploits0References1
Prion
Prion
•added 2020/11/18 7:15 p.m.•20 views

Buffer overflow

Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could...

10CVSS9.8AI score0.04798EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/11/18 5:41 p.m.•38 views

CVE-2020-3470 Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could...

9.8CVSS10AI score0.04798EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/18 12:00 a.m.•3 views

CVE-2020-3470: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could...

10CVSS6.8AI score0.04798EPSS
SaveExploits0References3
Rows per page
Query Builder