org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-core-feature (>=3.0.0-03, <=3.21.1-01) potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (>=3.0.0-03, <=3.21.1-01)

org.sonatype.nexus:nexus-core MAVEN version =3.0.0-03, =3.4.0-02, =3.0.0-03, =3.21.1-01 Source cves: CVE-2020-10204 Source advisory: GHSA-8H56-V53H-5HHJ...

org.sonatype.nexus.capabilities:nexus-capabilities-model (2.3), org.sonatype.nexus.capabilities:nexus-capabilities-testsuite-helper (2.3) +14 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-03)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.capabilities:nexus-capabilities-model 2.3 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.0-02), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.0-02) +13 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.5.0-02)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-02 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.0-02 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.0-03), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.0-03) +13 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.5.0-03)

org.sonatype.nexus:nexus-core MAVEN version 2.5.0-03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.0-03 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.5.1-01), org.sonatype.nexus.plugins.ldap:ldap-common (2.5.1-01) +13 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.5.1-01)

org.sonatype.nexus:nexus-core MAVEN version 2.5.1-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.5.1-01 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.1-01), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.1-01) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.1-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.1-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.1-01 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.2-01), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.2-01) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.2-01)

org.sonatype.nexus:nexus-core MAVEN version 2.6.2-01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.2-01 -...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.4-03), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.4-03) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.4-03)

org.sonatype.nexus:nexus-core MAVEN version 2.6.4-03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.4-03 -...

org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model (2.4.0-09), org.sonatype.nexus.plugins.ldap:ldap-common (2.4.0-09) +11 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.4.0-09)

org.sonatype.nexus:nexus-core MAVEN version 2.4.0-09 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.indexer-lucene:nexus-indexer-lucene-model 2.4.0-09 -...

GHSA-8H56-V53H-5HHJ Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

org.sonatype.nexus.plugins:nexus-capabilities-model (2.6.0-05), org.sonatype.nexus.plugins:nexus-capabilities-testsuite-helper (2.6.0-05) +16 more potentially affected by CVE-2020-10204 via org.sonatype.nexus:nexus-core (2.6.0-05)

org.sonatype.nexus:nexus-core MAVEN version 2.6.0-05 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.nexus:nexus-core and may be impacted: - org.sonatype.nexus.plugins:nexus-capabilities-model 2.6.0-05 -...

Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution...

org.sonatype.nexus.assemblies:nexus-base-feature (>=3.4.0-02, <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.21.1-01) +33 more potentially affected by CVE-2020-10199 via org.sonatype.nexus:nexus-extdirect (>=3.4.0-02, <=3.21.1-01)

org.sonatype.nexus:nexus-extdirect MAVEN version =3.4.0-02, =3.4.0-02, =3.4.0-02, =3.21.0-01, =3.12.0-01, =3.4.0-02, =3.12.0-01, =3.4.0-02, =3.17.0-01, =0.0.1, =0.0.2, =0.0.3, =0.0.4, =0.0.13, =1.0.3 and more Source cves: CVE-2020-10199 Source advisory:...

Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

GHSA-G2F6-V5QH-H2MQ Nexus Repository Manager 3 - Remote Code Execution

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection issue 1 of 2...

org.sonatype.nexus.assemblies:nexus-base-feature (>=3.4.0-02, <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-base-template (>=3.4.0-02, <=3.21.1-01) +33 more potentially affected by CVE-2020-10199 via org.sonatype.nexus:nexus-extdirect (>=3.4.0-02, <=3.21.1-01)

org.sonatype.nexus:nexus-extdirect MAVEN version =3.4.0-02, =3.4.0-02, =3.4.0-02, =3.21.0-01, =3.12.0-01, =3.4.0-02, =3.12.0-01, =3.4.0-02, =3.17.0-01, =0.0.1, =0.0.2, =0.0.3, =0.0.4, =0.0.13, =1.0.3 and more Source cves: CVE-2020-10199 Source advisory:...

Exploit for Expression Language Injection in Sonatype Nexus

CVE-2020-10199-10204 http://1984-0day.com python3 poc.py...

Cisco Nexus 1000V DoS

The vulnerability of microprogrammed software in the Cisco Nexus 1000V virtual switch is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco NX-OS Resource Management DoS

The vulnerability of the Cisco NX-OS operating system’s resource management system in Cisco MDS 9000 Series multi-port switches is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Cisco Discovery Maintenance Failure

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco NX-OSS and Cisco FXOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...