Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface of an affected device. The vulnerability is due to insufficient validation of...

PT-2019-3976

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA affected versions not specified Description A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct cross-site...

PT-2019-3962

Name of the Vulnerable Software and Affected Versions Cisco RV Series Routers affected versions not specified Cisco Small Business RV016 affected versions not specified Cisco Small Business RV042 affected versions not specified Cisco Small Business RV042G affected versions not specified Cisco Sma...

PT-2019-3963

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions affected versions not specified Description A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an authenticated, remote attacker to...

Arbitrary Command Execution Vulnerability in Multiple Cisco Products

Cisco RV016 Multi-WAN VPN Router and so on are a VPN virtual private network router from Cisco. An arbitrary command execution vulnerability exists in the Web management interface of several Cisco products, which stems from the program's failure to validate the input of HTTP payloads, and can be...

PT-2019-3974

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016 versions prior to the fixed version Cisco Small Business RV042 versions prior to the fixed version Cisco Small Business RV042G versions prior to the fixed version Cisco Small Business RV082 versions prior to the fixe...

PT-2019-4039

Name of the Vulnerable Software and Affected Versions Cisco Industrial Network Director affected versions not specified Description The issue is related to insufficient protection of the web page structure in the Cisco Industrial Network Director's web-based management interface. This could allow...

Cisco Video Communications Server Command Injection Vulnerability

Cisco Video Communications Server VCS is a video communications server for videoconferencing solutions from the U.S. company Cisco Cisco. A command injection vulnerability exists in Cisco VCS X versions prior to 7.0.3, which stems from the possibility that the program may fail to properly handle...

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to cause a service failure.

The vulnerability of the web interface for managing Microprogramming-based IP phones from the Cisco SPA100 series is related to errors during the verification of user requests sent to the web management interface. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability (CNVD-2019-39612)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

CVE-2019-18225

An issue was discovered in Citrix Application Delivery Controller ADC and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain...

Authentication flaw

An issue was discovered in Citrix Application Delivery Controller ADC and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain...

CVE-2019-18225: Undefined Security Weakness

An issue was discovered in Citrix Application Delivery Controller ADC and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain...

PT-2019-15287

Name of the Vulnerable Software and Affected Versions Citrix Application Delivery Controller ADC and Gateway versions prior to 10.5 build 70.8 Citrix Application Delivery Controller ADC and Gateway versions 11.x prior to 11.1 build 63.9 Citrix Application Delivery Controller ADC and Gateway...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability (CNVD-2019-36458)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability (CNVD-2019-36460)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability (CNVD-2019-36452)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability (CNVD-2019-36459)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...