Sonatype Nexus Repository Manager code-related vulnerabilities

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An external entity injection vulnerability exists in the Sonatype Nexus Repository Manager product, which allows an attacker with Nexus Repository Manager administrator privileges to configure the system in su...

Cisco Nexus Data Broker Configuration Function Reroute

The vulnerability of the configuration function of the Cisco Nexus Data Broker lies in insufficient verification of configuration backup files. Exploiting this vulnerability allows a malicious actor to rewrite any files at will...

CVE-2020-0019

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798...

CVE-2020-0016

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483...

Default credentials

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483...

Default credentials

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798...

CVE-2020-0019

CVE-2020-0019 affects Broadcom Nexus firmware in Android SoCs, where an insecure default password may allow local information disclosure in the kernel without extra privileges or user interaction. Exploitation is local; impact is confidentiality loss as described by CVSS metrics. The available do...

CVE-2020-0019

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798...

CVE-2020-0016

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483...

CVE-2020-0016

CVE-2020-0016 concerns Broadcom Nexus firmware where an insecure default password in the Broadcom middleware could permit local escalation of privilege in the kernel without user interaction. Affected context is tied to Android devices/SoCs using this firmware; exploitation is described as local,...

CVE-2020-0016: Use of Hard-coded Credentials

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483...

CVE-2020-0019: Initialization of a Resource with an Insecure Default

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413798...

PT-2020-11388

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The issue concerns an insecure default password in the Broadcom Nexus firmware. This could lead to local information disclosure in the kernel without requiring additional executi...

PT-2020-11385

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The issue is related to an insecure default password in the Broadcom Nexus firmware. This could lead to local escalation of privilege in the kernel with no additional execution...

ASB-A-171413798

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local information disclosure in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

Sonatype Nexus Repository Stored Cross Site Scripting (CVE-2020-10203)

A cross-site scripting vulnerability exists in Sonatype Nexus Repository. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Sonatype Nexus Repository Remote Code Execution (CVE-2020-10204)

A remote code execution vulnerability exists in Sonatype Nexus Repository. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-15012

A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk that the user running nxrm also has access to...

CVE-2020-15012

A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk that the user running nxrm also has access to...

CVE-2020-15012

A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk that the user running nxrm also has access to...