PT-2021-3487

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue exists due to insufficient validation of user-supplied input in the web-based management interface. This could allow a remote attacker to conduct a stored...

PT-2021-3588

Name of the Vulnerable Software and Affected Versions Cisco Virtualized Voice Browser affected versions not specified Description A vulnerability in the web-based management interface of Cisco Virtualized Voice Browser could allow an unauthenticated, remote attacker to conduct a cross-site...

CVE-2021-35029

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected devi...

Authentication flaw

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected devi...

PT-2021-20802

Name of the Vulnerable Software and Affected Versions: Zyxel USG/Zywall series firmware versions 4.35 through 4.64 Zyxel USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01 Description: An authentication bypass vulnerability in the web-based management interface could allow a remote...

Cisco Data Center Network Manager Authorization Bypass Vulnerabilities (cisco-sa-dcnm-authbypass-OHBPbxu)

The version of Cisco Data Center Network Manager installed on the remote host is prior to 11.51. It is, therefore, affected by multiple vulnerabilities in the web-based management interface. A remote, authenticated attacker can exploit these to view, modify, and delete data without proper...

Cisco SD-WAN vManage Software Path Traversal (cisco-sa-vman-pathtrav-Z5mCVsjf)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by a vulnerability in the web-based management interface due to insufficient validation of HTTP requests. An authenticated, remote attacker can exploit this, by sending crafted HTTP requests, in order to conduct pat...

ZOHO ManageEngine ServiceDesk Plus 代码问题漏洞

Zoho ManageEngine ServiceDesk Plus MSP is a web-based ITSM suite designed for managed service providers. A server-side request forgery vulnerability exists in versions prior to Zoho ManageEngine ServiceDesk Plus MSP 10521. No detailed vulnerability details are provided at this time...

CVE-2021-21004

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2021-21004

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

Code injection

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2021-21004

CVE-2021-21004 affects Phoenix Contact FL SWITCH SMCS series. An attacker can inject malicious code via LLDP frames into the device’s web-based management, which could be executed by the client. Documented impact includes potential modification or execution of code on the client side, with CVSS d...

CVE-2021-21004 Cross-site Scripting Vulnerability in Phoenix Contact FL SWITCH SMCS series products

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

CVE-2021-21004: Improper Neutralization of Input During Web Page Generation

In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client...

PT-2021-14331

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL SWITCH SMCS series products affected versions not specified Description: The issue allows an attacker to insert malicious code via LLDP frames into the web-based management, which could then be executed by the client...

CVE-2021-32644: Improper Neutralization of Input During Web Page Generation

Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering versions 4.x.y are vulnerable to code injection in random.php. The attack requires user authentication to access the random.php page unless the site is running in demo mode. Th...

CVE-2021-1571

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

CVE-2021-1541

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

CVE-2021-1542

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting XSS attac...

CVE-2021-1395

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not...