PT-2021-2965

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services Software WAAS affected versions not specified Description The issue is related to improper input validation and authorization of specific commands that a user can execute within the Command Line Interface...

PT-2021-2202

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager affected versions not specified Description: The issue is related to the implementation of the REST API interface in the Cisco Data Center Network Manager system, which is associated with the use of an...

CVE-2018-17178: Undefined Security Weakness

An issue was discovered on Neato Botvac Connected 2.2.0 devices. They execute unauthenticated manual drive commands sent to /bin/webserver on port 8081 if they already have an active session. Commands like forward, back, arc-left, arc-right, pivot-left, and pivot-right are executed even though th...

CVE-2016-5422: Undefined Security Weakness

The web console in Red Hat JBoss Operations Network JON before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request...

CVE-2014-3345: Undefined Security Weakness

The web framework in Cisco Transport Gateway for Smart Call Home aka TG-SCH or Transport Gateway Installation Software 4.0 does not properly check authorization for administrative web pages, which allows remote attackers to modify the product via a crafted URL, aka Bug ID CSCuq31503...