Sonatype Nexus Repository Manager code-related vulnerabilities

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A code issue vulnerability exists in Sonatype Nexus Repository Manager3 versions prior to 3.38.0 that stems from forcing the server...

CVE-2022-27907: Server-Side Request Forgery (SSRF)

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

Design/Logic Flaw

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

CVE-2021-43961 affects Sonatype Nexus Repository Manager 3.36.0 (NXS/NXRM). The connected sources specify a HTML Injection vulnerability in this version. No exploit vectors, exploit status, or remediation details are provided in the available documents. The reports consistently describe the issue...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

PT-2022-11958

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager version 3.36.0 Description The issue allows for HTML Injection. Recommendations For Sonatype Nexus Repository Manager version 3.36.0, at the moment, there is no information about a newer version that contains ...

CVE-2021-43961: Improper Neutralization of Input During Web Page Generation

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

American Auto-Matrix Front-End Solutions Vulnerabilities

OVERVIEW Independent researcher Maxim Rupp has identified a local file inclusion and a plain text storage of password vulnerabilities in American Auto-Matrix’s Building Automation Front-End Solutions application. The Aspect-Matrix hardware platform was made end of life in 2015 and will no longer...

Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection DoS (cisco-sa-nxos-bfd-dos-wGQXrzxn)

According to its self-reported version, Cisco NX-OS Software for Cisco Nexus 9000 Series Switches is affected by a denial of service vulnerability. The vulnerability exists in the rate limiter for Bidirectional Forwarding Detection BFD traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series...

Sonatype Nexus Repository Manager cross-site scripting vulnerabilities

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager 3.x through 3.37.0. A remote attacker sending a specially...

Cisco Nexus Dashboard Fabric Controller Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Cisco Nexus Dashboard Fabric Controller. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Cisco Nexus Dashboard Fabric Controller XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Nexus Dashboard Fabric Controller. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the AMF protocol. Due to the improper...

Cisco Nexus Dashboard Fabric Controller AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Nexus Dashboard Fabric Controller. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the AMF protocol. Crafted data in an AMF protoco...

WordPress NEXUS plugin <= 2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress NEXUS plugin versions = 2.0. Solution No patched version available...

WordPress NEXUS plugin <= 2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress NEXUS plugin versions = 2.0. Solution No patched version available...

Cisco NX-OS NX-API Command Execution

The vulnerability of the NX-API implementation for Cisco NX-OS router systems involves the failure to eliminate special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted HTTP POST request...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit one of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages...