PT-2021-1624

Name of the Vulnerable Software and Affected Versions: Cisco RV110W versions not specified Cisco RV130 versions not specified Cisco RV130W versions not specified Cisco RV215W versions not specified Description: The vulnerability is related to insufficient input validation in the web-based...

PT-2021-1572

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description: The issue is related to improper validation of user-supplied input in the web-based management interface, which could allow an...

CVE-2021-1174: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1169: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1189: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

PT-2021-1574

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description: The issue is related to improper validation of user-supplied input in the web-based management interface, which could allow an...

PT-2021-1588

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions not specified Cisco RV130 versions not specified Cisco RV130W versions not specified Cisco RV215W versions not specified Description The issue is caused by a buffer overflow on the stack in the web-based management...

CVE-2021-1178: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

PT-2021-1579

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions not specified Cisco RV130 versions not specified Cisco RV130W versions not specified Cisco RV215W versions not specified Description The issue is caused by improper validation of user-supplied input in the web-based...

PT-2021-1757

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers affected versions not specified Description The issue is related to insufficient input validation by the web-based management interface, which could allow an authenticated, remote...

PT-2021-1665

Name of the Vulnerable Software and Affected Versions: Cisco RV110W versions not specified Cisco RV130 versions not specified Cisco RV130W versions not specified Cisco RV215W versions not specified Description: The issue is caused by a buffer overflow on the stack in the web-based management...

CVE-2021-1177: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1164: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

PT-2021-1754

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions not specified Cisco RV130 versions not specified Cisco RV130W versions not specified Cisco RV215W versions not specified Description The issue is related to insufficient input validation by the web-based management...

CVE-2021-1151: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

CVE-2021-1168: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2020-4079

CVE-2020-4079 affects Combodo iTop prior to 2.7.2 and 2.8.0 where the ajax endpoint for the Excel export portal could be accessed directly, bypassing scope filtering and exposing data to users who should not have access. Root cause: missing access control on the Excel export data retrieval. Impac...

IBM Emptoris Contract Management Cross-Site Scripting Vulnerability (CNVD-2021-01992)

IBM Emptoris Contract Management is a web-based contract management software for managing and maintaining legal contracts between parties. A cross-site scripting vulnerability exists in IBM Emptoris Contract Management 10.1.3. An attacker can exploit this vulnerability to embed arbitrary JavaScri...

RCE 'Bug' Found and Disputed in Popular PHP Scripting Framework

Versions of the popular developer tool Zend Framework and its successor Laminas Project can be abused by an attacker to execute remote code on PHP-based websites, if they are running web-based applications that are vulnerable to attack. However, those that maintain Zend Framework emphasize that t...

Multiple vulnerabilities in UNIVERGE SV9500/SV8500 series

Overview Remote system maintenance feature of UNIVERGE SV9500/SV8500 series' Web based remote maintenance console contains multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2020-5685 Incorrect Implementation of Authentication Algorithm CWE-303 - CVE-2020-5686 NEC Platforms,...