CVE-2021-1184

CVE-2021-1184 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issue stems from improper validation in the web-based management interface, allowing an authenticated remote attacker to execute arbitrary code as root or trigger a device restart/DoS by sending crafted HTTP reques...

CVE-2021-1182

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are affected by CVE-2021-1182 due to improper validation of input in the web-based management interface. The vulnerability allows an authenticated attacker with admin credentials to send crafted HTTP requests to the device, potentially execu...

CVE-2021-1178

CVE-2021-1178 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue is in the web-based management interface and UPnP service, caused by improper validation of user-supplied input, enabling an authenticated attacker to remotely execute arbitrary code as root or cause a...

CVE-2021-1127 Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to improper input...

CVE-2021-1130

Cisco DNA Center suffers a Cross-Site Scripting (XSS) vulnerability in its web-based management interface. The flaw arises from improper validation of user-supplied input, enabling an authenticated attacker to lure a user into clicking a crafted link, which could allow execution of arbitrary scri...

CVE-2021-1130 Cisco DNA Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

CVE-2021-1130 Cisco DNA Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

CVE-2021-1245

The CVE-2021-1245 entry concerns Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor. The connected Cisco advisory sources confirm an XSS vulnerability in the web-based management interface caused by improper input validation. An unauthenticated, remote attacker can lure a user to click ...

CVE-2021-1246 Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote...

CVE-2021-1239

CVE-2021-1239 refers to multiple stored XSS vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). An authenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution or access to browser data due to inadequ...

CVE-2021-1238

Cisco Firepower Management Center (FMC) web-based management interface is affected by multiple stored XSS vulnerabilities. The issue arises from insufficient input validation, allowing an authenticated, remote attacker to lure a user into clicking a crafted link to execute arbitrary script code o...

CVE-2021-1216

Cisco Small Business RV110W, RV130, RV130W, and RV215W routers expose multiple vulnerabilities in the web-based management interface due to improper validation of user-supplied input. An authenticated attacker with valid administrator credentials can send crafted HTTP requests to the device to ex...

CVE-2021-1212

Cisco Small Business RV110W/RV130/RV130W/RV215W routers contain web-based management interface input validation vulnerabilities that require valid administrator credentials to exploit. An authenticated attacker could send crafted HTTP requests to execute arbitrary code as root or cause a device r...

CVE-2021-1212 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1211

CVE-2021-1211 concerns Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The web-based management interface fails to validate user-supplied input, allowing an authenticated attacker with valid admin credentials to execute arbitrary code as root or trigger a device reload, causing DoS. Expl...

CVE-2021-1210 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1208

The CVE-2021-1208 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue stems from improper validation in the web-based management interface, allowing an authenticated, remote attacker with valid administrator credentials to execute arbitrary code as root or cau...

CVE-2021-1208 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1206

Cisco Small Business RV110W/RV130/RV130W/RV215W routers suffer multiple vulnerabilities in the web-based management interface due to improper input validation. An authenticated attacker with valid admin credentials could exploit crafted HTTP requests to execute arbitrary code as root or cause a d...

CVE-2021-1189

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...