ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure Vulnerability

ABB Cylon Aspect version 3.08.01 suffers from an unauthenticated information disclosure vulnerability. An unauthorized attacker can reference the affected page and disclose various BACnet MS/TP statistics running on the device. ABB Cylon Aspect 3.08.01 mstpstatus.php Information Disclosure Vendor...

Google Pixel 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 for Google Pixel/Nexus devices, which can be...

Cisco Nexus Uncontrolled Resource Consumption (CVE-2020-3168)

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

Cisco NX-OS Missing Authorization (CVE-2020-3394)

A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX- OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the...

ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Configuration Download Vulnerability

ABB Cylon Aspect version 3.08.01 suffers from an unauthenticated configuration download vulnerability. This can be exploited to download the CSV DB that contains the configuration mappings information via the VMobileImportExportServlet by directly calling the vstatConfigurationDownload.php script...

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers arises from the lack of authentication mechanisms. This vulnerability allows attackers to influence the integrity of the protected information.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to influence the integrity...

The vulnerability in the implementation of TLS and SSL protocols in Cisco Nexus Dashboard Orchestrator (NDO) allows a perpetrator to disclose protected information.

The vulnerability of the TLS and SSL protocol implementations in Cisco Nexus Dashboard Orchestrator NDO relates to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability in the web interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Nexus Dashboard Fabric Controller NDFC web interface relates to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in a container with root privileges...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) lies in the lack of authentication, which allows a malicious actor to influence the integrity and accessibility of the protected information.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to influence the integrity...

The vulnerability of the log-viewing function in the web interface for managing analytics and automation of cloud computing in Cisco Nexus Data Center Dashboard Insights allows a malicious actor to disclose protected information.

The vulnerability of the log-viewing function in the web interface for managing analytics and automation of cloud-based data center systems from Cisco Nexus Dashboard Insights relates to the disclosure of information through registration files. Exploiting this vulnerability allows a malicious act...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) lies in the lack of authentication, which allows a malicious actor to influence the integrity of the protected information.

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller NDFC relates to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to influence the integrity of the protected information...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) involves improper authorization, allowing a malicious individual to disclose protected information.

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller NDFC is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by downloading configuration files or full backup files...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) relates to the implementation or modification of arguments, allowing a perpetrator to cause a service failure.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard Fabric Controller NDFC is related to the implementation or modification of arguments. Exploiting this vulnerability can allow a malicious actor to cause service failures by rewriting confidential files or...

The vulnerability of the web interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) management platform, which involves unencrypted storage of data in files or on disks, allows attackers to disclose protected information.

The vulnerability of the web interface of the Cisco Nexus Dashboard Fabric Controller NDFC management platform involves unencrypted storage of data in files or on disks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the access control list mechanism of Cisco Nexus 3550-F microprogramming devices allows a intruder to send traffic to the control interface of the vulnerable device.

The vulnerability of the access control list mechanism in Cisco Nexus 3550-F microprogrammable switches is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to send traffic to the management interface of the vulnerable device remotely...

CVE-2024-5082

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5082 Nexus Repository 2 - Remote Code Execution

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

CVE-2024-5082

CVE-2024-5082 corresponds to a Remote Code Execution issue in Sonatype Nexus Repository 2 (OSS/Pro) up to version 2.15.1 . The connected Nuclei template documents a Remote Code Execution vulnerability affecting Nexus Repository 2 before patch, with the impact described as attackers being able to ...

CVE-2024-5082 Nexus Repository 2 - Remote Code Execution

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...

EUVD-2024-47116

A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2. This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1...