The vulnerability in the web interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Nexus Dashboard Fabric Controller NDFC web interface relates to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in a container with root privileges...

The vulnerability of the log-viewing function in the web interface for managing analytics and automation of cloud computing in Cisco Nexus Data Center Dashboard Insights allows a malicious actor to disclose protected information.

The vulnerability of the log-viewing function in the web interface for managing analytics and automation of cloud-based data center systems from Cisco Nexus Dashboard Insights relates to the disclosure of information through registration files. Exploiting this vulnerability allows a malicious act...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) relates to the implementation or modification of arguments, allowing a perpetrator to cause a service failure.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard Fabric Controller NDFC is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor to cause service failures by rewriting confidential files or...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) lies in the lack of authentication, which allows a malicious actor to influence the integrity of the protected information.

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller NDFC relates to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to influence the integrity of the protected information...

The vulnerability of the access control list mechanism of Cisco Nexus 3550-F microprogramming devices allows a intruder to send traffic to the control interface of the vulnerable device.

The vulnerability of the access control list mechanism in Cisco Nexus 3550-F microprogrammable switches is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to send traffic to the management interface of the vulnerable device remotely...

CVE-2024-5082

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5082 Nexus Repository 2 - Remote Code Execution

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

EUVD-2024-47116

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5082 Nexus Repository 2 - Remote Code Execution

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5082

CVE-2024-5082 corresponds to a Remote Code Execution issue in Sonatype Nexus Repository 2 (OSS/Pro) up to version 2.15.1 . The connected Nuclei template documents a Remote Code Execution vulnerability affecting Nexus Repository 2 before patch, with the impact described as attackers being able to ...

CVE-2024-5083

A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5083 Nexus Repository 2 - Stored XSS

A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5083 Nexus Repository 2 - Stored XSS

A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5083

A stored cross-site scripting vulnerability affects Sonatype Nexus Repository 2 (OSS/Pro) up to and including version 2.15.1. Public descriptions indicate the issue is a stored XSS flaw in Nexus Repository 2 and that remediation involves updating to a version that includes the fix (as noted by PT...

Sonatype Nexus Repository Manager 跨站脚本漏洞

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager version 2.15.1 and earlier, which stems from the...

Cisco Nexus 3500 Series Switches Privilege Permission and Access Control Issues Vulnerability

Cisco Nexus 3500 Series Switches is a 3500 series switch from Cisco USA. The Cisco Nexus 3500 Series Switches are vulnerable to a privilege-granting and access-control issue, which arises from an ACL denial rule that is not properly enforced when the device is rebooted. An unauthenticated, remote...

Sonatype Nexus Repository 代码注入漏洞

Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A code injection vulnerability exists in Sonatype Nexus Repository version 2.15.1 and earlier, which stems from the presence of a remote code...

Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability

The Cisco Nexus Dashboard Fabric Controller is a cloud and data center network management software controller that simplifies the operation and management of data center networks. The Cisco Nexus Dashboard Fabric Controller suffers from a SQL injection vulnerability that can be exploited by remot...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) allows a attacker to access the internal database.

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller NDFC relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain access to the internal database by sending...

CVE-2024-20536

A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient...