Dell EMC OpenManage Server Administrator Authentication Bypass (CVE-2021-21513)

An authentication bypass vulnerability exists in Dell EMC OpenManage Server Administrator. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Cisco Security Advisories page and apply the necessary...

CVE-2021-34786

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...

CVE-2021-34785

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...

Atlassian Confluence Remote Code Execution (CVE-2021-26084)

A remote code execution vulnerability exists in Atlassian Confluence. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Compal ConnectBox Remote Code Execution (CVE-2019-13025)

A remote code execution vulnerability exists in Compal ConnectBox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress WooCommerce Plugin SQL Injection

An SQL injection vulnerability exists in WordPress WooCommerce Plugin. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

Microsoft SharePoint Server Remote Code Execution (CVE-2021-34467)

A remote code execution vulnerability exists in Microsoft SharePoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages...

Nagios Fusion Remote Code Execution (CVE-2020-28905)

A remote code execution vulnerability exists in Nagios Fusion. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Cisco Webex Network Webex Player Buffer Overflow Vulnerability

Cisco Webex Network Webex Player is a player for playing video conference recordings from Cisco USA. A buffer overflow vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player, which can be exploited by an attacker to execute arbitrary code on an affected system...

Xymon xymond Remote Code Execution (CVE-2016-2056)

A remote code execution vulnerability exists in Xymon xymond. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Drupal Core Hex Rendering Remote Code Execution

A code execution vulnerability exists in Drupal Core. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

TikiWiki Project SQL Injection (CVE-2004-1925)

An SQL injection vulnerability exists in TikiWiki Project. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

D-Link DIR-878 Command Injection (CVE-2019-8315)

A command injection vulnerability exists in D-Link DIR-878 devices. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Qcubed Remote Code Execution (CVE-2020-24914)

A remote code execution vulnerability exists in Qcubed. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Apple Darwin Streaming Server Remote Code Execution (CVE-2003-0050)

A remote code execution vulnerability exists in Apple Darwin Streaming Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

LightCMS Remote Code execution (CVE-2021-27112)

A remote code execution vulnerability exists in LightCMS. Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code on the affected system...

CVE-2020-7034

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for...

Xxe

An XML External Entities XXEvulnerability in the web-based user interface of Avaya Aura Orchestration Designer could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The affected versions of Orchestration Designer includes all 7.x...