Design/Logic Flaw

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

CVE-2018-16619

Sonatype Nexus Repository Manager before 3.14 allows XSS...

CVE-2018-16621

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

CVE-2018-16621

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

Cross site scripting

Sonatype Nexus Repository Manager before 3.14 allows XSS...

CVE-2018-16620

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

CVE-2018-16619

Sonatype Nexus Repository Manager before 3.14 allows XSS...

CVE-2018-16620

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

CVE-2018-16620

The CVE-2018-16620 entry concerns Sonatype Nexus Repository Manager prior to 3.14, with Improper/Incorrect Access Control. Multiple connected sources confirm the issue arises from failing to enforce access controls, enabling a misbehavior that could let an attacker reach other hosts or open ports...

CVE-2018-16620

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

CVE-2018-16619

CVE-2018-16619 affects Sonatype Nexus Repository Manager prior to version 3.14 and is a cross-site scripting (XSS) vulnerability. The issue allows an attacker to execute arbitrary JavaScript in a user’s browser, with exploitation described as remote and requiring user interaction in some sources....

CVE-2018-16621

CVE-2018-16621 affects Sonatype Nexus Repository Manager prior to version 3.14, where Java Expression Language Injection is possible. The root cause is insecure EL handling in the repository manager, enabling injection that can lead to server-side behavior manipulation. In the public records, the...

CVE-2018-16621

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...

CVE-2018-16619

Sonatype Nexus Repository Manager before 3.14 allows XSS...

The vulnerability in the implementation of the Precision Time Protocol (PTP) in the network operating system of Cisco NX-OS on Cisco Nexus switches of the 5500, 5600, and 6000 series allows a attacker to cause a service failure.

The vulnerability of the Precision Time Protocol PTP implementation in the network operating system of Cisco NX-OS on Cisco Nexus series 5500, 5600, and 6000 switches is caused by errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in the Cisco NX-OS network operating system allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in the Cisco NX-OS network operating system arises due to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to restart the device and trigger a service failure using speciall...

Imgur: Ability to login to the Nexus Repo Manager from https://nexus.imgur.com/

Hello Imgur Administrators, I am not sure if this falls in your scope but I wanted to alert you that your Nexus Repository Manager can be accessed through https://nexus.imgur.com/ Usually the default user/pass for the NRM are admin/admin123 but there is an alternative way to login using the below...

Pixel / Nexus Security Bulletin—November 2018Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-11-05 or later address all issues in this bulletin and all issues in the...

Cisco FXOS and NX-OS Denial of Service Vulnerabilities

Cisco FXOS is the Firepower extensible operating system.Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the implementation of Link Layer...

Cisco NX-OS Denial of Service Vulnerability (CNVD-2018-23894)

Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the Precision Time Protocol PTP feature of the Cisco NX-OS software running on Cisco Nexus 550...