Lucene search
+L

4571 matches found

OSV
OSV
added 2021/01/20 8:15 p.m.6 views

CVE-2021-1259

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain write access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP...

6.5CVSS5.9AI score0.01949EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/20 8:11 p.m.38 views

CVE-2021-1218 Cisco Smart Software Manager Satellite Open Redirect Vulnerability

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an...

4.6CVSS5.6AI score0.00564EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/20 8:11 p.m.77 views

CVE-2021-1218

Cisco Smart Software Manager Satellite's web management interface is affected by an open redirect vulnerability due to improper input validation of URL parameters in an HTTP request. An authenticated, remote attacker could craft a request to redirect a user to a malicious website. Cisco reports t...

5.4CVSS4.8AI score0.00564EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/01/20 7:57 p.m.2 views

CVE-2021-1257 Cisco DNA Center Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The...

7.1CVSS5.6AI score0.00836EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.10 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

10CVSS7.9AI score0.02194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.9 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

10CVSS7.9AI score0.02194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.11 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

10CVSS7.9AI score0.02753EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/20 12:00 a.m.10 views

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An authorization bypass vulnerability exists in the SSH console of the Web management interface of Cisco SD-WAN vManage, which can be exploited by an attacker to access sensitive informati...

8.8CVSS6.6AI score0.01616EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/20 12:00 a.m.12 views

Cisco SD-WAN vManage Software 路径遍历漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A path traversal vulnerability exists in the Web management interface of Cisco SD-WAN vManage versions prior to 18.2.0. The vulnerability stems from insufficient authentication of HTTP...

6.8CVSS6.4AI score0.01949EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.10 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

10CVSS7.9AI score0.02194EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/20 12:00 a.m.10 views

Cisco Web Security Appliance Cross-Site Scripting Vulnerability

The Cisco Web Security Appliance WSA is a web security appliance from Cisco. The appliance provides SaaS-based access control, real-time web reporting and tracking, and security policy formulation.AsyncOS Software is the operating system used in the appliance. A cross-site scripting vulnerability...

4.8CVSS6AI score0.00787EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/01/20 12:00 a.m.13 views

Cisco Smart Software Manager SQL注入漏洞

Cisco Smart Software Manager Satellite is a Cisco component for Cisco product license management. A SQL injection vulnerability exists in the Web management interface of Cisco Smart Software Manager Satellite 5.1.0 and earlier versions. The vulnerability stems from the web management interface no...

8.1CVSS6.9AI score0.01247EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/01/20 12:00 a.m.13 views

Cisco SD-WAN vManage Software SQL注入漏洞

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. A SQL injection vulnerability exists in the Web management interface of Cisco SD-WAN vManage versions prior to 19.2.3. The vulnerability stems from the Web management interface not properl...

9.1CVSS6.9AI score0.01391EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/01/19 12:00 a.m.10 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software used in Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W routers exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or...

9CVSS7.5AI score0.02753EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/01/15 12:00 a.m.3 views

Weak Password Vulnerability in Huawei Secoway USG2205HSR Firewall web management page

Secoway USG2205HSR is a firewall product from Huawei Technologies Co. A weak password vulnerability exists in the web management page of the Huawei Secoway USG2205HSR firewall, which can be exploited by an attacker to obtain sensitive information...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/01/14 12:00 a.m.21 views

Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41222)

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

9CVSS8.1AI score0.02194EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/14 12:00 a.m.27 views

Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41198)

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

9CVSS8.1AI score0.02194EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/14 12:00 a.m.14 views

Cisco RV110W/RV130/RV130W/RV215W Cross-Site Scripting Vulnerability (CNVD-2021-41157)

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A stored cross-site scripting vulnerability exists in the Web management interface of the Cisco...

4.8CVSS6.2AI score0.00552EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/14 12:00 a.m.19 views

Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41199)

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

9CVSS8.1AI score0.02194EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/14 12:00 a.m.25 views

Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41177)

The Cisco RV110W is a Wireless-N VPN firewall, the Cisco RV130 is a multifunction VPN router, the Cisco RV130W is a Wireless-N multifunction VPN router, and the Cisco RV215W is a Wireless-N VPN router. A remote command execution and denial of service vulnerability exists in the Web management...

9CVSS8.1AI score0.02194EPSS
SaveExploits0References1
Rows per page
Query Builder