5342 matches found
CVE-2019-16530
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...
CVE-2019-16530
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...
Remote code execution
Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution...
CVE-2019-16530
CVE-2019-16530 affects Sonatype Nexus Repository Manager (NXRM) 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, enabling remote code execution. Root cause reports indicate an attacker with sufficient privileges can upload a crafted file that executes code on the server. Several c...
Sonatype Nexus Repository Manager Remote Code Execution Vulnerability (CNVD-2019-37731)
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A remote code execution vulnerability exists in Sonatype NXRM, which can be exploited by an attacker to upload malicious files...
Sonatype Nexus Repository Manager Remote Code Execution Vulnerability
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A remote code execution vulnerability exists in Sonatype NXRM version 2.x prior to 2.14.15, which can be exploited by an attacker to execute code...
Remote Code Execution
Sonatype Nexus Repository Manager is vulnerable to remote code execution. An attacker with administrative access to NXRM is able to create repositories that can grant access to read/execute system data outside the scope of NXRM...
CVE-2019-15893
Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...
CVE-2019-15893
Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...
Remote code execution
Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...
CVE-2019-15893
CVE-2019-15893 affects Sonatype Nexus Repository Manager 2.x prior to 2.14.15. A vulnerability exists that, with administrative NXRM access, allows an attacker to create repositories that grant read/execute access to system data outside the intended scope, enabling remote code execution on the se...
CVE-2019-15893
Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution...
LOWKEY: Hunting for the Missing Volume Serial ID
In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group: APT41. A China-nexus dual espionage and financially-focused group, APT41 targets industries such as gaming, healthcare, high-tech, higher education, telecommunications, and travel services. This blog...
Sonatype Nexus Repository Manager CVE-2019-15588 OS Command Injection Vulnerability
Description Sonatype Nexus Repository Manager is prone to an OS command-injection vulnerability. An attacker may exploit this issue to inject and execute arbitrary commands within the context of the affected application; this may aid in further attacks. Versions prior to Nexus Repository Manager...
The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system, which allows a intruder to trigger a service failure.
The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system is related to errors in processing TCP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the IPv6 traffic processing service of the Cisco NX-OS operating system allows a attacker to trigger a service failure.
The vulnerability of the IPv6 traffic processing service of the Cisco NX-OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Endpoint Learning function in the network operating system NX-OS of Cisco Nexus series 9000 switches allows a intruder to trigger a service failure.
The vulnerability of the Endpoint Learning function in the network operating system NX-OS of Cisco Nexus series 9000 switches is related to state management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Cisco NX-OS Software Operating System Command Injection Vulnerability
Cisco Nexus 3000 Series Switches and other products are Cisco products.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus 3500 Platform Switches is a 3500 series platform switch.Cisco Nexus 3600 Platform Switches is a 3600 series platform switch.Cisco NX-OS Software is a set of...
CVE-2019-12662
A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper...
