CVE-2019-1977 Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an endpoint device in certain circumstances. The...

Cisco NX-OS Software Resource Management Error Vulnerability

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A resource management error vulnerability exists in the Network Time Protocol NTP feature of Cisco NX-OS Software, which can be exploited by remote attackers to cause a...

Cisco NX-OS Software Resource Management Error Vulnerability (CNVD-2019-32062)

Cisco Nexus 3000 Series Switches are Cisco products.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus 3500 Platform Switches is a 3500 series platform switch.Cisco MDS 9000 Series Multilayer Switches is a MDS 9000 series multilayer switch.Cisco NX-OS Software is a set of data...

CVE-2019-1977: Undefined Security Weakness

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an endpoint device in certain circumstances. The...

Cisco NX-OS Software Input Validation Error Vulnerability

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. An input validation error vulnerability exists in the NX-API feature of Cisco NX-OS Software, which arises from the program's failure to properly validate the HTTP header o...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review t...

Cisco Nexus 7000 Series Switches and Nexus 7700 Series Switches NX-OS Software Input Validation Error Vulnerability

Cisco Nexus 7000 Series Switches and Cisco Nexus 7700 Series Switches are both products of Cisco Corporation.Cisco Nexus 7000 Series Switches are a 7000 series switch.Cisco Nexus 7700 Series Switches are a 7700 series switch. Cisco Nexus 7000 Series Switches are a 7000 series switch. Cisco Nexus...

CVE-2019-1964

A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffic sent through an affected device. An...

Central Security Project: Unrestricted File Upload Leading to Remote Code Execution

Description As an administrator user it is possible to create files and directories in any location on the file system of the server. This can be abused to write files to any sensitive location on the Windows file system because the Nexus process runs with SYSTEM privileges. This can allows an...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning Vulnerability

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an endpoint device in certain circumstances. The...

PT-2019-3272

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches affected versions not specified Description The issue is related to errors in state management within the Endpoint Learning feature of the Cisco Nexus 9000 Series Switches. This could allow a remote attacker to...

Sonatype Nexus Repository Manager Cross-Site Scripting Vulnerability (CNVD-2020-22382)

Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A cross-site scripting vulnerability exists in Sonatype Nexus Repository Manager. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit th...

CVE-2019-14469

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS...

CVE-2019-14469

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS...

Cross site scripting

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS...

CVE-2019-14469

Nexus Repository Manager (NXRM) is affected by CVE-2019-14469: in versions prior to 3.18.0, users with elevated privileges can create stored XSS in the web application. The vulnerability arises from a lack of proper protection against client-side script execution, enabling an attacker with elevat...

CVE-2019-14469

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS...

CVE-2019-14469: Improper Neutralization of Input During Web Page Generation

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS...

PT-2019-13713

Name of the Vulnerable Software and Affected Versions Nexus Repository Manager versions prior to 3.18.0 Description The issue allows users with elevated privileges to create stored XSS. Recommendations For versions prior to 3.18.0, update to version 3.18.0 or later to resolve the issue...

GAME OVER: Detecting and Stopping an APT41 Operation

In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group, APT41. A China-nexus dual espionage and financially-focused group, APT41 targets industries such as gaming, healthcare, high-tech, higher education, telecommunications, and travel services. APT41 is...