6411 matches found
CVE-2018-16619
Sonatype Nexus Repository Manager before 3.14 allows XSS...
CVE-2018-16619: Improper Neutralization of Input During Web Page Generation
Sonatype Nexus Repository Manager before 3.14 allows XSS...
PT-2018-13651
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.14 Description The issue allows Java Expression Language Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...
Cisco NX-OS PTP DoS
The vulnerability of the Precision Time Protocol PTP implementation in the network operating system of Cisco NX-OS on Cisco Nexus series 5500, 5600, and 6000 switches is caused by errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service...
Cisco NX-OS SNMP DoS
The vulnerability of the Simple Network Management Protocol SNMP packet processor in the Cisco NX-OS network operating system arises due to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to restart the device and trigger a service failure using speciall...
CVE-2018-16620: Incorrect Authorization
Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...
PT-2018-13650
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.14 Description The issue is related to Incorrect Access Control in the software. Recommendations For versions prior to 3.14, update to version 3.14 or later to resolve the issue...
PT-2018-13649
Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager versions prior to 3.14 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker injects malicious code into a website, potentially stealing user data or taking...
CVE-2018-16621: Improper Neutralization of Special Elements used in an Expression Language Statement
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection...
com.threerings.nexus:nexus-gwt-server (0.1), com.threerings:ooo-app (>=1.0, <=1.0.1) +47 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (7.4.3.v20110701)
org.eclipse.jetty:jetty-server MAVEN version 7.4.3.v20110701 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - com.threerings.nexus:nexus-gwt-server 0.1 - com.threerings:ooo-app =1.0, =1.0.1 -...
Imgur: Ability to login to the Nexus Repo Manager from https://nexus.imgur.com/
Hello Imgur Administrators, I am not sure if this falls in your scope but I wanted to alert you that your Nexus Repository Manager can be accessed through https://nexus.imgur.com/ Usually the default user/pass for the NRM are admin/admin123 but there is an alternative way to login using the below...
Pixel / Nexus Security Bulletin—November 2018Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of 2018-11-05 or later address all issues in this bulletin and all issues in the...
Cisco NX-OS Denial of Service Vulnerability (CNVD-2018-23895)
Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS. The...
Cisco FXOS and NX-OS Denial of Service Vulnerabilities
Cisco FXOS is the Firepower extensible operating system.Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the implementation of Link Layer...
Cisco NX-OS Denial of Service Vulnerability (CNVD-2018-23894)
Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the Precision Time Protocol PTP feature of the Cisco NX-OS software running on Cisco Nexus 550...
CVE-2018-0378
A vulnerability in the Precision Time Protocol PTP feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of...
CVE-2018-0378
A vulnerability in the Precision Time Protocol PTP feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of...
Design/Logic Flaw
A vulnerability in the Precision Time Protocol PTP feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of...
CVE-2018-0378 Cisco NX-OS Software for Nexus 5500, 5600, and 6000 Series Switches Precision Time Protocol Denial of Service Vulnerability
A vulnerability in the Precision Time Protocol PTP feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a lack of...
CVE-2018-0378
CVE-2018-0378 affects Cisco Nexus 5500/5600/6000 series switches running NX-OS. The issue is in the Precision Time Protocol (PTP) implementation, caused by a lack of protection against PTP frame flood attacks. An unauthenticated, remote attacker can send large streams of malicious IPv4/IPv6 PTP t...