PT-2021-1837

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow an...

CVE-2021-1269: Incorrect Authorization

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this...

CVE-2021-1225: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates value...

CVE-2021-1305: Improper Input Validation

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1250: Improper Input Validation

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

CVE-2021-1249: Improper Input Validation

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow a remote attacker with network-operator privileges to conduct a cross-site scripting XSS attack or a reflected file download RFD attack against a user of the interface. For more...

CVE-2021-1257: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The...

CVE-2021-1270: Incorrect Authorization

Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this...

Oracle Hospitality Reporting and Analytics Access Control Error Vulnerability

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data to provide operational and analytical insights into business operations and improve efficiency by delivering information to all roles within an organization. An unspecified vulnerability...

CVE-2021-1222: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values...

PT-2021-1833

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description The issue is related to the web-based management interface of Cisco SD-WAN vManage Software, which improperly validates values in SQL queries. This could allow an...

PT-2021-1851

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description The issue is related to errors in processing HTTP requests in the web-based management interface of Cisco SD-WAN vManage Software. This could allow a remote attacker to...

PT-2021-1914 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software. An authenticated, remote attacker could bypass...

CVE-2021-1302: Improper Input Validation

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

PT-2021-1876

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow a remote...

PT-2021-1857 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue concerns multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software. An authenticated, remote attacker could bypass...

PT-2021-1842

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow a remote...

CVE-2021-1304: Improper Input Validation

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not...

CVE-2021-1271: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the...

USN-4693-1: Ampache vulnerabilities

It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any data contained in the database. An attacker could use this to disclose sensitive information. CVE-2019-12385 It was discovered that an XSS vulnerability in...