Swisslog Healthcare Nexus Panel security vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare.An elevation of privilege vulnerability exists in versions prior to Nexus Control Panel 7.2.5.7. An attacker could exploit this vulnerability to gain root access to the device, which would allow access to all device...

Swisslog Healthcare Nexus Panel has a digital error vulnerability

Swisslog Healthcare Nexus Panel, a medical device from Swisslog Healthcare, is vulnerable to an integer underflow vulnerability in versions prior to Nexus Control Panel 7.2.5.7. An attacker could use this vulnerability to override the internal queue data structure, which could enable remote code...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port DoS (cisco-sa-apic-lldap-dos-WerV9CFj)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability. The vulnerability exists in the Link Layer Discovery Protocol LLDP due to incorrect processing of LLDP on packets on an SFP interface. An unauthenticated, adjacent attacker can explo...

PT-2021-21534

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager 3 versions prior to 3.33.0 Description Multiple XSS issues exist in the software. An authenticated attacker with the ability to add HTML files to a repository could redirect users to the software's pages with...

CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

Design/Logic Flaw

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

Vulnerability fixed in Sonatype Nexus

Sonatype has fixed a vulnerability in Nexus Repository 3. An authenticated malicious person could exploit the vulnerability to gain access to sensitive information. Sonatype has released updates to fix the vulnerability in Nexus Repository 3.31.0. For more information, see:...

CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

CVE-2021-34553

Sonatype Nexus Repository Manager 3.x before 3.31.0 is vulnerable: remote authenticated attackers can enumerate blob files and read blob contents via GET without proper access. Affected software is Nexus Repository Manager 3.x prior to 3.31.0; remediation is to upgrade to 3.31.0 or later (per Red...

PT-2021-20543

Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository Manager versions prior to 3.31.0 Description: The issue allows a remote authenticated attacker to obtain a list of blob files and read the content of a blob file via a GET request without having the necessary access...

CVE-2021-34553: Improper Limitation of a Pathname to a Restricted Directory

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file via a GET request without having been granted access...

Sonatype Nexus Repository Manager path traversal vulnerability

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used for managing, storing, and distributing software, among other things. A path traversal vulnerability in Sonatype Nexus Repository Manager version 3.x prior to 3.31.0 allows remote authenticated attacke...

sp.sd:nexus-artifact-uploader (>=2.1, <=2.2) potentially affected by CVE-2021-21648 via org.jenkins-ci.plugins:credentials (1.26)

org.jenkins-ci.plugins:credentials MAVEN version 1.26 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - sp.sd:nexus-artifact-uploader =2.1, =2.2 Source cves: CVE-2021-21648 Source advisory:...

nexus-uploader (1.0.14), uranium (>=0.2.38, <=1.1.0) potentially affected by CVE-2019-20916 via pip (8.1.1)

pip PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - nexus-uploader 1.0.14 - uranium =0.2.38, =1.1.0 Source cves: CVE-2019-20916 Source advisory: OSV:GHSA-GPVV-69J7-GWJ8...

Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation DoS (cisco-sa-n9kaci-bgp-De9dPKSK)

According to its self-reported version, the Border Gateway Protocol BGP for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI is affected by denial of service vulnerability due to an issue with the installation of routes upon receipt of a BGP update. An...

Exploit for CVE-2019-7238

CVE-201...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access (cisco-sa-n9kaci-unauth-access-5PWzDx2w)

According to its self-reported version, the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI is affected by unauthorized access vulnerability due to insufficient security requirements during the Link Layer...

CVE-2021-29159

A cross-site scripting XSS vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application...