294 matches found
CVE-2023-20055 Cisco DNA Center Privilege Escalation Vulnerability
A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of sensitive information. An attacker coul...
CVE-2023-20055
A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of sensitive information. An attacker coul...
PT-2023-2106 · Cisco · Cisco Dna Center
Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface o...
K14734: Apache HTTP server vulnerability CVE-2013-2249
Security Advisory Description modsessiondbd.c in the modsessiondbd module in the Apache HTTP Server before 2.4.5 proceeds with save operations for a session without considering the dirty flag and the requirement for a new session ID, which has unspecified impact and remote attack vectors...
SUSE CVE-2017-3144
A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond...
SUSE CVE-2020-27821
A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...
GHSA-MJMJ-J48Q-9WG2 vulnerabilities
Vulnerabilities for packages: metric-collector-for-apache-cassandra-4.1, cassandra-reaper, management-api-for-apache-cassandra-5.0...
CVE-2022-1471 vulnerabilities
Vulnerabilities for packages: metric-collector-for-apache-cassandra-4.1, cassandra-reaper, management-api-for-apache-cassandra-5.0...
Vulnerability fixed in Atlassian Crowd
A vulnerability has been fixed in Atlassian Crowd. This vulnerability allows a malicious person to, through a configuration error to authenticate itself and thereby interact with the user management REST API. In doing so, the IP of the attacker must be on the allow list, which is not the default...
CVE-2022-41854 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, hadoop-fips...
CVE-2022-41854 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-9W3M-GQGF-C4P9 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1...
GHSA-9W3M-GQGF-C4P9 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-HHHW-99GJ-P3C3 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1...
GHSA-98WM-3W3Q-MW94 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1...
GHSA-C4R9-R8FH-9VJ2 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-98WM-3W3Q-MW94 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-HHHW-99GJ-P3C3 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...