CVE-2021-1200

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

多款Cisco产品缓冲区错误漏洞

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

多款Cisco产品缓冲区错误漏洞

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

多款Cisco产品缓冲区错误漏洞

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

多款Cisco产品缓冲区错误漏洞

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

PT-2021-1701 · Cisco · Cisco Small Business Rv130W +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description: The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticated,...

The vulnerability in the web interface of the Cisco Vision Dynamic Signage Director allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Vision Dynamic Signage Director digital content management web interface exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

IBM Sterling File Gateway 跨站脚本漏洞

IBM Sterling File Gateway is a centralized management gateway product for file transfers from IBM USA. A cross-site scripting vulnerability exists in IBM Sterling File Gateway 2.2.0.0 - 6.0.3.2. An attacker can exploit the vulnerability by embedding arbitrary JavaScript code in the Web UI that ca...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface for managing data collection and aggregation from Cisco DNA Spaces Connector controllers and access points allows a hacker to execute arbitrary commands.

The vulnerability in the web interface for managing data collection and aggregation from Cisco DNA Spaces Connector controllers and access points is related to the failure to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute cross-site scripting attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability in the web interface of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense software allows a perpetrator to trigger a system reboot.

The vulnerability of the web-based interfaces of Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense lies in the absence of restrictions on file downloads. Exploiting this vulnerability could allow a malicious actor to trigger a system reboot by downloading files into specific...

CVE-2020-3304

A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...

The vulnerability in the web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web interface for controlling the Cisco Data Center Network Manager DCNM system is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected informatio...

Apache Hadoop Authorization Issues Vulnerability

Apache Hadoop is the United States Apache Apache Software Foundation's set of open source distributed systems infrastructure. Apache Hadoop suffers from an authorization issue vulnerability that stems from a vulnerability in the web interface when Kerberos authentication is enabled and HTTP SPNEG...

CVE-2020-3135

A vulnerability in the web-based management interface of Cisco Unified Communications Manager UCM could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based...

GE Reason S20 Ethernet Switch Cross-Site Scripting Vulnerability

The GE Reason S20 Ethernet Switch is a General Electric switch from General Electric GE. A cross-site scripting vulnerability exists in the Reason S20 managed Ethernet switches, which stems from a lack of proper validation of client data by a WEB application. An attacker can exploit this...

CVE-2020-15789

A vulnerability has been identified in Polarion Subversion Webclient All versions. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who...

CVE-2020-3546

A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...