Lucene search
+L

36 matches found

OSV
OSV
added 2021/01/20 9:15 p.m.9 views

CVE-2021-1250

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

5.4CVSS6.1AI score0.00614EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/20 9:15 p.m.27 views

CVE-2021-1250

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

6.5CVSS6.3AI score0.00614EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/20 8:15 p.m.26 views

CVE-2021-1286

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

6.5CVSS6.3AI score0.0094EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/20 8:15 p.m.22 views

CVE-2021-1253

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

6.5CVSS6.3AI score0.00614EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/20 8:15 p.m.21 views

Cross site scripting

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

3.5CVSS5.3AI score0.00614EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/01/20 8:10 p.m.10 views

CVE-2021-1253 Cisco Data Center Network Manager Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

6.5CVSS5.9AI score0.00614EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/20 8:10 p.m.28 views

CVE-2021-1253 Cisco Data Center Network Manager Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

6.5CVSS6.4AI score0.00614EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/01/20 7:55 p.m.12 views

CVE-2021-1286 Cisco Data Center Network Manager Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

6.5CVSS5.9AI score0.0094EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/01/20 12:00 a.m.5 views

PT-2021-1843 · Cisco · Cisco Data Center Network Manager

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager DCNM affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow a remote...

6.5CVSS5.7AI score0.00614EPSS
SaveExploits0References5
OSV
OSV
added 2019/08/23 6:15 p.m.12 views

CVE-2019-1583

Escalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and earlier allows a Twistlock user with Operator capabilities to escalate privileges to that of another user. Active interaction with an affected component is required for the payload to execute on the...

8CVSS7.3AI score0.01168EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2008/10/30 12:00 a.m.28 views

Quassel IRC: connection hijacking

Quassel IRC http://quassel-irc.org/ is "a modern, cross-platform, distributed IRC client". A vulnerability in the CTCP handling allows an attacker to trick Quassel IRC into sending arbitrary commands to the IRC server. This can be used by an attacker for example to gain operator privileges on a...

2.1AI score
SaveExploits0
securityvulns
securityvulns
added 2007/08/16 12:00 a.m.44 views

Vulnerability in multiple "now playing" scripts for various IRC clients

In October 2006 I discovered many "now playing" scripts for various IRC clients allow an attacker to send commands to the IRC server on behalf of the user. Details ======= Many scripts for various IRC clients, that report the name of the currently playing song in a media player on IRC share the...

0.1AI score
SaveExploits0
Cvelist
Cvelist
added 2005/11/21 11:00 a.m.33 views

CVE-2004-2553

The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument...

6.2AI score0.01763EPSS
SaveExploits0References7
CVE
CVE
added 2005/11/21 11:00 a.m.64 views

CVE-2004-2553

The CVE-2004-2553 issue affects IgnitionServer ignitionServer 0.1.2 through 0.1.2-R2. A remote authenticated user with local IRC operator privileges can escalate to a global IRC operator by issuing the unofficial umode command with the +ORD argument. This privilege escalation is validated by mult...

6CVSS6.2AI score0.01763EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2004/12/31 5:00 a.m.21 views

CVE-2004-2553

The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument...

6CVSS6.2AI score0.01763EPSS
SaveExploits0References7
securityvulns
securityvulns
added 2004/05/15 12:00 a.m.30 views

Bea weblogic shwutdown limitations bypass

User with admin or operator pribvileges can shutdown server even if this operation is restricted...

3.2AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder