CVE-2024-20362

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficie...

CVE-2024-20332

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP...

CVE-2024-20281

A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF...

CVE-2024-20310

Cisco CVE-2024-20310 affects the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P). The issue is caused by improper validation of user-supplied input in the management interface, enabling a cross-site scripting (XSS) attack when an authenticated u...

Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. This vulnerability is due to insufficient CSRF...

Cisco Nexus Dashboard and Nexus Dashboard Hosted Services Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF...

PT-2024-3823 · Cisco · Cisco Unified Communications Manager Im & Presence Service

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P versions not specified Description: The issue is related to a path traversal flaw in the web-based interface of the system, which could allow a remote attacker to...

Cisco TelePresence Management Suite 安全漏洞

Cisco TelePresence Management Suite TMS is a management suite of videoconferencing solutions from Cisco USA. The product is primarily used for deploying large-scale remote and local videoconferencing and provides contact management and centralized configuration management. A security vulnerabilit...

PT-2024-3796 · Cisco · Cisco Telepresence Management Suite

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Management Suite affected versions not specified Description: The issue is related to insufficient input validation in the web-based management interface, allowing a low-privileged, remote attacker to conduct a cross-site...

Cisco Small Business 安全漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in Cisco Small Business RV016, RV042, RV042G, RV082, RV320, RV325, which stems from insufficient validation of inputs in the web-based management interface...

Cisco Unified Communications Manager 安全漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco USA. The component provides a scalable, distributable, and highly available enterprise IP telephony call processing solution. A security vulnerability...

PT-2024-3799 · Cisco · Cisco Emergency Responder

Name of the Vulnerable Software and Affected Versions: Cisco Emergency Responder affected versions not specified Description: A vulnerability in the web UI of Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack. This is due to insufficie...

Tenda FH1205 Stack Buffer Overflow Vulnerability (CNVD-2025-21465)

The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 suffers from a stack buffer overflow vulnerability that arises from the page parameter of the fromAddressNat method failing to properly validate the length of the input data, which can be exploited by an attacker to execute...

PT-2024-3857 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-sit...

PT-2024-3860 · Cisco · Cisco Small Business Rv082 +5

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers affected versions not specified Description: A vulnerability in the web-based management interface of the affected routers could allow an unauthenticated, remote...

PT-2024-3822 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to improper input validation for specific HTTP requests in the web-based management interface, allowing an authenticated, remote attacker to...

The vulnerability in the web-based control interface of Uniview’s IP cameras allows a intruder to bypass the authentication process and gain full access to the device.

The vulnerability of Univew’s web-based IP camera control interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain full access to the device...

[SECURITY] Fedora 39 Update: gitit-0.15.1.1-6.fc39

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line too ls or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

SUSE CVE-2024-2947

A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer...

Gradio 安全漏洞

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. Gradio suffers from a security vulnerability that stems from a password checking condition that is susceptible to a timing attack to guess passwords...