Lucene search
+L

5448 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/25 12:00 a.m.19 views

The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems allows a perpetrator to execute arbitrary code with root privileges or cause a service failure.

The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code with root privileges or cause service failures...

9.6CVSS6.2AI score0.00396EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
added 2022/08/24 12:00 a.m.15 views

Cisco NX-OS Software 缓冲区错误漏洞

Cisco NX-OS Software is a suite of data center-grade operating system software for switches from Cisco. A security vulnerability exists in Cisco NX-OS Software OSPFv3, which stems from incomplete validation of inputs to specific OSPFv3 messages allowing an unauthenticated, remote attacker to...

8.6CVSS5.7AI score0.011EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/08/24 12:00 a.m.16 views

Cisco NX-OS Software和Cisco FXOS Software 缓冲区错误漏洞

Cisco NX-OS Software and Cisco FXOS Software are both products of Cisco, Inc.Cisco NX-OS Software is a suite of data center-grade operating system software for use in switches.Cisco FXOS Software is a suite of firewall software that runs in Cisco security appliances. Cisco FXOS Software is a set ...

8.8CVSS6.2AI score0.00396EPSS
SaveExploits0References6
NVD
NVD
added 2022/08/20 12:15 a.m.13 views

CVE-2022-36030

Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available...

9.8CVSS0.00842EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/20 12:15 a.m.23 views

Sql injection

Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available...

7.5CVSS9.7AI score0.00842EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/08/20 12:00 a.m.8 views

Project-nexus SQL注入漏洞

Project-nexus is a generalized blog site by the individual developer Vineeth B V in India. Project-nexus suffers from an SQL injection vulnerability that stems from its insensitivity to user input...

9.8CVSS8.4AI score0.00842EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/08/19 11:35 p.m.25 views

CVE-2022-36030 SQL Injection in Project-nexus

Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available...

9.8CVSS10AI score0.00842EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/08/19 11:35 p.m.9 views

CVE-2022-36030 SQL Injection in Project-nexus

Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available...

9.8CVSS9.8AI score0.00842EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/19 11:35 p.m.17 views

CVE-2022-36030 SQL Injection in Project-nexus

Project-nexus is a general-purpose blog website framework. Affected versions are subject to SQL injection due to a lack of sensitization of user input. This issue has not yet been patched. Users are advised to restrict user input and to upgrade when a new release becomes available...

9.8CVSS9.4AI score
SaveExploits0References3
CVE
CVE
added 2022/08/19 11:35 p.m.72 views

CVE-2022-36030

CVE-2022-36030 affects Project-nexus, a general-purpose blog framework. It describes an SQL injection in affected versions caused by insufficient sanitization of user input. The entry notes no patch yet and recommends input restriction and upgrading to a new release when available. CVSS3.1 metric...

9.8CVSS9.9AI score0.00842EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/19 12:00 a.m.25 views

PT-2022-23128 · Unknown · Project-Nexus

Name of the Vulnerable Software and Affected Versions: Project-nexus affected versions not specified Description: The issue is related to SQL injection due to a lack of sanitization of user input. This allows for potential exploitation. Users are advised to restrict user input. There is no...

9.8CVSS9.5AI score0.00842EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:00 a.m.12 views

The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a perpetrator to escalate their privileges.

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...

6.8CVSS6.6AI score0.00205EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:00 a.m.13 views

The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a perpetrator to escalate their privileges.

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...

6.8CVSS6.6AI score0.00205EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:00 a.m.11 views

The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a perpetrator to escalate their privileges.

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...

6.8CVSS6.6AI score0.00216EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:00 a.m.12 views

The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a hacker to escalate their privileges.

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS6.6AI score0.00216EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/02 12:00 a.m.12 views

The vulnerability of the TLS and SSL protocols used by Cisco Nexus Dashboard for analyzing and automating cloud network operations stems from errors in the certificate validation process. This allows attackers to access confidential information or alter data.

The vulnerability of the TLS and SSL protocols used in Cisco Nexus Dashboard, a platform for analytics and automation of cloud network operations, is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to confidential...

7.4CVSS7.4AI score0.00529EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/07/25 12:00 a.m.32 views

Cisco Nexus Dashboard Elevation of Privilege Vulnerability (CNVD-2022-54958)

Cisco Nexus Dashboard is the United States Cisco Cisco a single console. It can simplify the operation and management of data center networks. An elevation of privilege vulnerability exists in Cisco Nexus Dashboard that stems from insufficient input validation during CLI command execution. An...

6.7CVSS6.9AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/22 4:15 a.m.17 views

CVE-2022-20909

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these...

6.7CVSS0.00216EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/22 4:15 a.m.29 views

CVE-2022-20913

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to insufficient input validation in the web-based management interface of Cisco Nexus Dashboard. An attacker with Administrator...

6.5CVSS0.01065EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/22 4:15 a.m.11 views

CVE-2022-20908

Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. These vulnerabilities are due to insufficient input validation during CLI command execution on an affected device. An attacker could exploit these...

6.7CVSS5.9AI score0.00216EPSS
SaveExploits0References1
Rows per page
Query Builder