6547 matches found
Sonatype Nexus Repository Manager Operating System Command Injection Vulnerability
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. An operating system command injection vulnerability exists in Sonatype NXRM that can be exploited by an attacker to execute code...
Cisco Nexus 9000 Series Fabric Switches Buffer Overflow Vulnerability
Cisco Nexus 9000 Series Fabric Switches is a 9000 series fiber optic switch from Cisco USA. A buffer overflow vulnerability exists in the LLDP subsystem in Cisco Nexus 9000 Series Switch Software ACI Mode versions prior to 13.27f and 14.x. The vulnerability stems from a program's failure to...
Cisco Releases Security Updates
Cisco has released security updates to address a vulnerability in Cisco Nexus 9000 Series Fabric Switches. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review th...
CVE-2019-1901
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
CVE-2019-1901
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
Buffer overflow
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
CVE-2019-1901
Cisco Nexus 9000 Series ACI Mode Switch Software contains a LLDP-related buffer overflow (CVE-2019-1901) due to improper TLV field input validation. Affected on Nexus 9000 Fabric Switches in ACI mode running before 13.2(7f) or any 14.x release. Exploitation requires a directly connected interface...
CVE-2019-1901 Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
CVE-2019-1901 Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
PT-2019-2986 · Cisco · Cisco Nexus 9000 Series
Name of the Vulnerable Software and Affected Versions: Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software versions prior to 13.27f or any 14.x release. Description: A vulnerability in the Link Layer Discovery Protocol LLDP subsystem could allow an adjacent,...
CVE-2019-1901: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
Exploit for CVE-2019-7238
nexusrceCVE-2019-7238 Some debug notes and exploitnot blind...
Sonatype Nexus Repository Manager Missing Access Controls RCE
The Sonatype Nexus Repository Manager server application running on the remote host is version 3.x prior to 3.15.0. It is, therefore, affected by a remote code execution vulnerability due to insufficient access controls. An unauthenticated, remote attacker can exploit this to bypass authenticatio...
Central Security Project: OS Command Injection in Nexus Repository Manager 2.x
Maven artifact groupId: org.sonatype.nexus.plugins artifactId: nexus-yum-repository-plugin version: 2.14.9-01 Vulnerability Vulnerability Description The Nexus Yum Repository Plugin is vulnerable to Remote Code Execution. All instances using CommandLineExecutor.java with user-supplied data is...
This Week in Security News: Banking Malware and Phishing Campaigns
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the banking malware Anubis that has been retooled for use in fresh attack waves. Also, read about a new phishing campaign that...
Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability
According to its self-reported version, the Cisco NX-OS Software in ACI mode is affected by a security bypass vulnerability. An unauthenticated, adjacent attacker could exploit this vulnerability to connect an unauthorized server to the highly privileged infrastructure VLAN. Please see the includ...
Sonatype Nexus Repository Manager Weak Password Vulnerability
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A security vulnerability exists in Sonatype NXRM versions prior to 3.17.0, which stems from the default administrator account password being set to admin/admin123, which can be exploited by an attacker to gain...
Sonatype Nexus Repository Manager Information Disclosure Vulnerability
Sonatype Nexus Repository Manager NXRM is a Maven repository manager from Sonatype USA. A security vulnerability exists in Sonatype NXRM versions prior to 3.17.0. An attacker can exploit the vulnerability to read files and images in the repository...