CVE-2021-34731

Cisco Prime Access Registrar’s web-based management interface is affected by a stored Cross-Site Scripting vulnerability. An authenticated, remote attacker with valid administrative credentials could inject malicious code into specific pages, executing script in the interface context or accessing...

CVE-2021-34739

CVE-2021-34739 affects Cisco Small Business Series Switches: a vulnerability in the web-based management interface allows an unauthenticated attacker to replay valid session credentials via a man-in-the-middle attack due to insufficient expiration of session credentials. This could grant administ...

CVE-2021-34795 Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

CVE-2021-34731

A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an...

CVE-2021-40112

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

CVE-2021-34795

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

CVE-2021-40127

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based...

CVE-2021-40120

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system and execute them using root-level privileges. This...

Cisco Unified Communications Products Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could...

CVE-2021-34773

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated,...

Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated,...

CVE-2021-33210

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...

PT-2021-5078 · Cisco · Rv082 +5

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016 versions affected versions not specified Cisco Small Business RV042 versions affected versions not specified Cisco Small Business RV042G versions affected versions not specified Cisco Small Business RV082 versions...

D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability

D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution...

Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface...

Cisco Small Business 代码问题漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business suffers from a code issue vulnerability due to the Cisco switch's session credential authentication mechanism. An attacker could exploit this vulnerability to replay valid user session credentials and log into the web management...

PT-2021-4959 · Cisco · Cisco Catalyst Pon Series Switches Ont

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of the Cisco Catalyst...

Cisco Catalyst Passive Optical Network Series Switches 操作系统命令注入漏洞

Cisco Catalyst Passive Optical Network Series Switches Catalyst Pon Series Switches is a series of high-performance, simple and easy-to-maintain switches from Cisco. Used to provide competitive network solutions. An operating system command injection vulnerability exists in Cisco Catalyst Passive...

Cisco Unity Connection 和 Cisco Unified Communications Manager 路径遍历漏洞

Cisco Unity Connection UC and Cisco Unified Communications Manager CUCM, Unified CM, CallManager are both products of Cisco Corporation.Cisco Unity Connection is a voice Cisco Unity Connection is a voice messaging platform. The platform can use voice commands to make calls or listen to messages i...