The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers, related to errors in request processing, allows a perpetrator to disclose protected information.

The vulnerability of the Simple Network Management Protocol SNMP implementation on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers is related to errors in handling requests. Exploiting this vulnerability can allow a malicious actor to disclose protected...

The vulnerability relates to the implementation of the Control and Provisioning of Wireless Access Points protocol (CAPWAP) in Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers. It stems from insufficient resource management during their existence, allowing attackers to trigger service interruptions.

The vulnerability of the CAPWAP protocol implementation for Cisco IOS XE operating systems, Catalyst access points, and Cisco Catalyst 9000 series wireless network controllers is related to insufficient resource management during their existence. Exploiting this vulnerability could allow a...

The vulnerability of the DHCP protocol implementation in Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices leads to uncontrolled resource consumption. This allows attackers to trigger a device reboot or cause service failure.

The vulnerability of the DHCP protocol implementation in Cisco IOS XE operating systems and Cisco Catalyst 9000 Series network devices is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service...

DEBIAN-CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

Cross site scripting

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

UBUNTU-CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052 Catalyst-Plugin-Session Session ID Session.pm _load_sessionid cross site scripting

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads to cross site...

CVE-2018-25052

The CVE-2018-25052 entry concerns Catalyst-Plugin-Session (up to v0.40). The vulnerability affects the Session ID Handler’s function _load_sessionid in lib/Catalyst/Plugin/Session.pm. Malicious manipulation of the sid argument may cause cross-site scripting when processed, and exploitation is des...

Catalyst 跨站脚本漏洞

Catalyst is an elegant MVC web application framework. A cross-site scripting vulnerability exists in Catalyst Catalyst-Plugin-Session versions prior to 0.40, which stems from incorrect manipulation of the parameter sid leading to cross-site scripting...

PT-2022-8062 · Unknown · Catalyst-Plugin-Session

Name of the Vulnerable Software and Affected Versions: Catalyst-Plugin-Session versions up to 0.40 Description: A vulnerability has been found in the function load sessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the argument sid leads ...

The vulnerability of the Cisco Software-Defined Application Visibility and Control (SD-AVC) function in the centralized network management system, the Cisco Catalyst SD-WAN Manager, allows a intruder to gain unauthorized access to the system.

The vulnerability of the Cisco Software-Defined Application Visibility and Control SD-AVC function in the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to the lack of authentication for this critical function. Exploiting this vulnerability could allow a maliciou...

The vulnerability of Cisco Catalyst 9100 access point software, related to copying buffers without checking the size of input data, allows a intruder to trigger a service failure.

The vulnerability of Cisco Catalyst 9100 access point software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker operating remotely to cause service interruptions...

PT-2022-6993 · Cisco · Cisco Catalyst Sd-Wan Manager

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to inject HTML content. This issue is due to improper validation of...

PT-2022-7010 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches affected versions not specified Description: The issue is related to improper resource management when processing traffic received on the management interface,...

PT-2022-7008 · Cisco · Catalyst 9130 +5

Name of the Vulnerable Software and Affected Versions: Cisco access point AP software affected versions not specified Cisco Catalyst 9124, Catalyst 9130, Catalyst 9136, Catalyst 9164, and Catalyst 9166 affected versions not specified Description: A vulnerability in the networking component of Cis...

Buffer overflow in Heimdal unwrap_des3()

Description The DES for Samba 4.11 and earlier and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc allocated memory when presented with a maliciously small packet. Examples of where Samba can use GSSAPI include the client and...