Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability

A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To exploit this vulnerability, the attack...

CVE-2020-24622

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...

CVE-2020-24622

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...

Code injection

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...

CVE-2020-24622

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...

CVE-2020-24622

CVE-2020-24622 affects Sonatype Nexus Repository 3.26.1. An admin user can disclose S3 secret keys due to an information-disclosure vulnerability. The NVD entry lists CVSSv3.1 base score 4.9 (Medium) with network attack and low complexity; confidentiality impact is high while other impacts are no...

CVE-2020-24622

In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-48588)

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the web-based management interface ...

Sonatype Nexus Repository Manager Unauthorized Access Vulnerability

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype NXRM OSS/Pro versions prior to 3.26.0. An attacker could exploit the vulnerability to access...

CVE-2020-15868

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

CVE-2020-15868

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

Improper access control

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

CVE-2020-15868

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

CVE-2020-15868

Affected product: Sonatype Nexus Repository Manager OSS/Pro prior to 3.26.0. Vulnerability: Incorrect Access Control (root cause). Impact: authenticated? no; the CNVD entry states an attacker could access unauthorized content with a specially crafted request. CVSS details: CVSS v3.1 base 7.5 (HIG...

Sonatype Nexus Repository Manager Remote Code Execution Vulnerability (CNVD-2021-32036)

Nexus Repository Manager is a repository manager from Sonatype that lets you proxy, collect, and manage your dependencies so you don't have to deal with a series of JARs as often, allowing you to distribute your software with ease.OSS is the open-source, free version, and Pro is the professional,...

CVE-2020-15871

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution...

CVE-2020-15869

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS issue 1 of 2...

CVE-2020-15870

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS Issue 2 of 2...

CVE-2020-15871

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution...

CVE-2020-15870

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS Issue 2 of 2...