1721 matches found
Cisco Catalyst Center Privilege Escalation Vulnerability
A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should require Administrator privileges. The attacker would need valid read-only user credentials. This vulnerability is due to improper role-based access control RBAC. An attacker...
Cisco Catalyst Center Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An...
Cisco Catalyst Center 跨站脚本漏洞
Cisco Catalyst Center Cisco DNA Center is a network management system from the American company Cisco. Cisco Catalyst Center suffers from a cross-site scripting vulnerability that stems from insufficient user input validation. An attacker could exploit the vulnerability to cause cross-site...
PT-2025-46853
Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description A flaw exists in the REST API of Cisco Catalyst Center that could allow a remote attacker with valid credentials at least Observer role to execute arbitrary commands within a...
Cisco Catalyst Center 安全漏洞
Cisco Catalyst Center Cisco DNA Center is a network management system from Cisco USA. A security vulnerability exists in Cisco Catalyst Center that stems from improper role-based access control and could lead to a remote attacker performing administrator privileged operations...
Cisco Catalyst Center Virtual Appliance 访问控制错误漏洞
Cisco Catalyst Center Virtual Appliance is a network controller and automated management platform from the American company Cisco Cisco. The Cisco Catalyst Center Virtual Appliance suffers from an Access Control Error vulnerability that stems from insufficient validation of user input. An attacke...
PT-2025-46854
Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description A flaw exists in the web-based management interface of Cisco Catalyst Center that could permit a remote attacker, without needing to authenticate, to carry out a cross-site...
PT-2025-46864
Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description A flaw exists in Cisco Catalyst Center that could allow a remote attacker with valid read-only user credentials to perform actions typically reserved for Administrator privilege...
PT-2025-46855
A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit...
Cisco Catalyst Center Virtual Appliance 输入验证错误漏洞
Cisco Catalyst Center Virtual Appliance is a network controller and automated management platform from the American company Cisco Cisco. An input validation error vulnerability exists in the Cisco Catalyst Center Virtual Appliance that stems from improper validation of HTTP request parameters in...
PT-2025-46852
Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center Virtual Appliance affected versions not specified Description A flaw exists in Cisco Catalyst Center Virtual Appliance that could allow a remote attacker with valid credentials for a user account with at least the role of...
Malicious code in paulette-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320422b9549916ed1a903b1fdde13ba719183fa62f322a87db91b7bc7b2cd0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eugene-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535e75b7366b5df20db6b738d9e76bf0460d42914259468fb8d28c449da59d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lonny-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1666a1dc9802d39cfb57705827af09f01d85f825ce6b3a71c212c75eccb8556c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80265
Malicious code in townsend-validator-catalyst npm...
Malicious code in lois-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443a28a34078f1801c9ce7e2fffe41d25f37a5bf9c21f96b251a31b225f99db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79727
Malicious code in bernadine-validator-catalyst npm...
Malicious code in townsend-validator-catalyst (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c68446eccefea4b27787706d33e3b48f8c7242e8307a6c7757b4d9c96b9ae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...