Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-34292)

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the Web management interface in Cis...

CVE-2020-3233

A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based Local Manager interface of an affected device. The attacker must have...

The vulnerability of the web interface of the Cisco Hosted Collaboration Mediation Fulfillment software allows a perpetrator to disclose protected information.

The vulnerability of the Cisco Hosted Collaboration Mediation Fulfillment software’s web interface is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through specially crafted malicious...

The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to trigger a service failure.

The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Profitability Management banking analytics system’s simulation model allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Profitability Management banking analytics system’s simulation model application relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to create, delete,...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning component in the bank analytics system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning banking analytics system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete, or modify access...

The vulnerability of the User Interface sub-component of the Oracle Insurance Accounting Analyzer component in the bank analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface component of the Oracle Insurance Accounting Analyzer component in the bank analytics system’s simulation model application relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete, or modify...

F5 Networks BIG-IP : BIG-IP VE interface vulnerability (K03386032)

When the BIG-IP Virtual Edition VE is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer NDAL Interfaces can lock up and in turn disruptingthe communication between the mcpd and tmm processesCVE-2020-5881. Impact This issue...

CVE-2020-3251

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section o...

The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to trigger a service failure.

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to trigger a service failure.

The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to execute arbitrary code.

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow a malicious actor to trigger service failures or execute arbitrary codes remotely...

The vulnerability in the web interface of the Cisco TelePresence Management Suite’s centralized video system management software allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the web interface of the Cisco TelePresence Management Suite software for centralized video system management is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to perform cross-site forgery attacks.

The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform inter-site forged requests...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Identity Services Engine’s web interface relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

Shihonkanri Plus GOOUT vulnerable to OS command injection

Overview Shihonkanri Plus GOOUT provided by EKAKIN is a CGI that enables to view data stored in Shihonkanri Plus outside. Shihonkanri Plus GOOUT contains an OS command injection CWE-78 vulnerability. During the meeting of Committee for authorizing the disclosure of unresolved vulnerabilities held...

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

CVE-2020-0883

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0881...

rConfig SQL Injection Vulnerability (CNVD-2020-16098)

rConfig is an open source network device configuration management utility . A SQL injection vulnerability exists in the web interface of rConfig 3.94 and earlier versions. An attacker can exploit this vulnerability with a SQL injection attack via the commands.inc.php searchColumn parameter...