PT-2020-3130

Name of the Vulnerable Software and Affected Versions Cisco Vision Dynamic Signage Director affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker with administrative credentials to conduct SQL injection...

PT-2020-3132

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified Description The issue is related to errors in HTTP request authorization in the web-based...

PT-2020-3134

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface of Cisco Data Center Network Manager DCNM, which...

PT-2020-3106

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on ...

PT-2020-3111

Name of the Vulnerable Software and Affected Versions Cisco Prime License Manager PLM Software affected versions not specified Description A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthoriz...

CVE-2020-2031

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request result in denial of service ...

Command injection

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN-OS 7.1 and PAN-OS 8.0. This issue doe...

PAN-OS: OS command injection vulnerability in the management interface

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN-OS 7.1 and PAN-OS 8.0. This issue doe...

PAN-OS: Integer underflow in the management interface

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request result in denial of service ...

[SECURITY] Fedora 31 Update: python-flask-admin-1.5.6-1.fc31

Flask-Admin is advanced, extensible and simple to use administrative interf ace building extension for Flask framework. It comes with batteries included: model scaffolding for SQLAlchemy, MongoEngine, MongoDB and Peewee ORMs, simple file management interface and a lot of usage samples. You're not...

CVE-2020-2030: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN-OS 7.1 and PAN-OS 8.0. This issue doe...

CVE-2020-2031: Integer Underflow (Wrap or Wraparound)

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request result in denial of service ...

PT-2020-15258

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 9.1.3 Description The issue is related to an integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface. This vulnerability allows authenticated administrators to issue a command from...

PT-2020-15256

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 8.1.15 PAN-OS 7.1 PAN-OS 8.0 Description The issue is an OS Command Injection vulnerability in the PAN-OS management interface, allowing authenticated administrators to execute arbitrary OS commands with root privilege...

kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c

A flaw was found in the Linux kernel's implementation of IPMI remote baseband access. An attacker, with local access to read /proc/ioports, may be able to create a use-after-free condition when the kernel module is unloaded which may result in privilege escalation...

Critical RCE Flaw Affects F5 BIG-IP Application Security Servers

Cybersecurity researchers today issued a security advisory warning enterprises and governments across the globe to immediately patch a highly-critical remote code execution vulnerability affecting F5's BIG-IP networking devices running application security servers. The vulnerability, assigned...

The vulnerability of the Cisco IOS XR operating system’s access control list implementation allows a attacker to gain access to a device through the processor-based management interface of the backup route.

The vulnerability of the Cisco IOS XR operating system’s access control list implementation is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device through the processor-based management interface of...

CVE-2020-3340

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to...

PT-2020-3065

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker with...

CVE-2020-3282: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to...