CVE-2018-0215: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-0212: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0216: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-0210: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

PT-2018-8672

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perfo...

PT-2018-8642

Name of the Vulnerable Software and Affected Versions: Cisco Prime Data Center Network Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a...

PT-2018-8680

Name of the Vulnerable Software and Affected Versions: Cisco Unified Computing System UCS Director affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack agains...

PT-2018-8681

Name of the Vulnerable Software and Affected Versions: Cisco Videoscape AnyRes Live affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...

PT-2018-8678

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and...

PT-2018-8597

Name of the Vulnerable Software and Affected Versions: Cisco Web Security Appliance WSA versions 10.5.1 Description: A vulnerability in the FTP server could allow an unauthenticated, remote attacker to log in without a valid password, provided they have a valid username. This is due to incorrect...

PT-2018-8684

Name of the Vulnerable Software and Affected Versions: Cisco Security Manager affected versions not specified Description: A reflected cross-site scripting XSS attack could be conducted against a user of the web-based management interface due to insufficient validation of user-supplied input. An...

CVE-2018-0208: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of the cloud based Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected service. The vulnerability is...

CVE-2018-0219: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Computing System UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2018-0220: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Videoscape AnyRes Live could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-0087: Improper Authentication

A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...

Cisco Prime Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Data Center Network Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

PT-2018-3097

Name of the Vulnerable Software and Affected Versions Cisco Registered Envelope Service affected versions not specified Description A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site...

Command Injection Vulnerability in Multiple Citrix Products

Citrix NetScaler Application Delivery Controller and others are products of Citrix Systems, Inc.Citrix NetScaler Application Delivery Controller ADC. NetScaler ADC is a suite of service and application delivery solutions Application Delivery Controller; NetScaler Gateway is a secure remote access...

CVE-2018-5314 - Authentication Bypass Vulnerability in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that, if exploited, could allow an unauthenticated attacker with access to the NetScaler management interface to bypass authenticati...

Wireshark IPMI Parser Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.IPMI dissector is one of the IPMI Intelligent Platform Management Interface parser...