Cisco UCS Director Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco UCS Director is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco UCS Directory due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after which th...

EUVD-2018-1042

Malware in sbrugna...

EUVD-2019-6896

Malware in sbrugna...

EUVD-2020-24513

Malware in sbrugna...

EUVD-2018-7282

Malware in sbrugna...

EUVD-2020-24735

Malware in sbrugna...

EUVD-2020-24523

Malware in sbrugna...

EUVD-2017-12985

Malware in sbrugna...

EUVD-2018-0971

Malware in sbrugna...

EUVD-2018-7284

Malware in sbrugna...

EUVD-2020-24512

Malware in sbrugna...

EUVD-2017-12918

Malware in sbrugna...

EUVD-2018-1061

Malware in sbrugna...

EUVD-2019-10495

Malware in sbrugna...

EUVD-2014-0740

Malware in sbrugna...

EUVD-2022-26015

Malicious code in bioql PyPI...

The vulnerability in the web interface for managing physical infrastructure and Cisco UCS Director’s virtual environments allows a attacker to execute cross-site scripting attacks.

The vulnerability of the Web interface for managing physical infrastructure and Cisco UCS Director virtual environments is related to deficiencies in neutralizing special symbols. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

Cisco UCS Director Log4j Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd)

Cisco UCS Director is affected by the following critical vulnerability in the Apache Log4j Java logging library as described in the cisco-sa-apache-log4j-qRuKNEbd advisory. - Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 JNDI features used in configuration, log messages, and...

CVE-2022-20765

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

CVE-2022-20765

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...