CVE-2019-1759

CVE-2019-1759 affects Cisco IOS XE Software’s Gigabit Ethernet Management Interface ACL bypass. The issue arises from a logic error introduced in 16.1.1 that causes ACLs applied to the management interface to fail, potentially allowing an unauthenticated, remote attacker to reach configured IPs o...

Cisco IOS and IOS XE Access Control Error Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. An access control error vulnerability exists in the access control list feature of the Gigabit Ethernet management interface in Cisco IOS XE version 16.x, which can be exploited by...

CVE-2019-1759: Improper Access Control

A vulnerability in access control list ACL functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic err...

Cisco IOS XE Software Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

A vulnerability in access control list ACL functionality of the Gigabit Ethernet Management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the Gigabit Ethernet Management interface. The vulnerability is due to a logic err...

PT-2019-1748

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 16.1.1 and later Description A logic error in the access control list ACL functionality of the Gigabit Ethernet Management interface could allow an unauthenticated, remote attacker to reach the configured IP...

CVE-2019-1764

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections for the...

CVE-2019-1764 Cisco IP Phone 8800 Series Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections for the...

Cisco RV130W Routers Management Interface Remote Command Execution

A vulnerability in the web-based management interface of the Cisco RV130W Wireless-N Multifunction VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based...

CVE-2019-1764: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections for the...

CVE-2018-19934

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

Denial of Service in PAN-OS Management Interface

A Denial of Service vulnerability exists in the SNMP library that affects PAN-OS Management Interface. Ref PAN-106922, CVE-2018-18065. Successful exploitation of this issue would allow a remote unauthenticated user to cause the SNMP daemon to crash, resulting in a denial of service. The...

Denial of Service in PAN-OS Management Interface

A Denial of Service vulnerability exists in the SNMP library that affects PAN-OS Management Interface. Ref PAN-106922, CVE-2018-18065. Successful exploitation of this issue would allow a remote unauthenticated user to cause the SNMP daemon to crash, resulting in a denial of service. The...

Cisco IP Phone 7800 Series and 8800 Series Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code. The vulnerability...

Cisco IP Phone 8800 Series Path Traversal Vulnerability

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level...

PT-2019-1722

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 versions prior to 12.51SR1 Cisco IP Phone 7800 versions prior to 12.51SR1 Cisco IP Phone 8821 versions prior to 11.04SR3 Cisco IP Phone 8821-EX versions prior to 11.04SR3 Cisco IP Conference Phone 8831 versions prior to...

PT-2019-1719

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 Series versions prior to 11.05 for Wireless IP Phone 8821 and 8821-EX Cisco IP Phone 8800 Series versions prior to 12.51SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series Description A vulnerabili...

PT-2019-1720

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 Series versions prior to 11.05 for Wireless IP Phone 8821 and 8821-EX Cisco IP Phone 8800 Series versions prior to 12.51SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series Description A vulnerabili...

PT-2019-1723

Name of the Vulnerable Software and Affected Versions Cisco IP Phone 8800 Series versions prior to 11.05 for Wireless IP Phone 8821 and 8821-EX Cisco IP Phone 8800 Series versions prior to 12.51SR1 for the IP Conference Phone 8832 and the rest of the IP Phone 8800 Series Description A vulnerabili...

CVE-2018-19934: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

PT-2019-9947

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.6.25 Description The issue concerns reflected cross-site scripting XSS in the Web management interface. This occurs via the URL path and an HTTP POST parameter. Recommendations For SolarWinds Serv-U FT...