Lucene search
+L

358 matches found

OSV
OSV
added 2021/10/04 8:15 p.m.3 views

DEBIAN-CVE-2021-41092

Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running docker login my-private-registry.example.com with a misconfigured configuration file typically /.docker/config.json listing a credsStore or credHelpers that could not be...

7.5CVSS6.1AI score0.01652EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/23 3:15 a.m.12 views

CVE-2021-34726

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation on certain C...

7.2CVSS0.00366EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/23 3:15 a.m.14 views

Input validation

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation on certain C...

7.2CVSS6.7AI score0.00366EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/23 12:0 a.m.10 views

The vulnerability of the CLI component of the Cisco IOS XR operating system allows a perpetrator to execute arbitrary commands with root privileges or gain increased privileges.

The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary...

7.8CVSS7.5AI score0.00282EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/09/09 5:15 a.m.8 views

CVE-2021-34722

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details sectio...

6.7CVSS6AI score0.00282EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/09/08 12:0 a.m.6 views

PT-2021-4146 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information than their privileges allow. This issue is due to...

5.5CVSS5.1AI score0.00258EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/08/02 12:0 a.m.9 views

The vulnerability of the CLI command-line interface implementation of the kdbg tool in Fortinet FortiAP access points allows a hacker to execute arbitrary commands.

The vulnerability of the CLI command-line interface implementation of the Fortinet FortiAP access point software relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS7.5AI score0.00295EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
added 2021/07/22 3:20 p.m.34 views

CVE-2021-34700 Cisco SD-WAN vManage Software Information Disclosure Vulnerability

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficient...

5.5CVSS5.7AI score0.00254EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/06 1:15 p.m.23 views

CVE-2021-1512

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. ...

6CVSS0.00229EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.16 views

The vulnerability of the command-line interface (CLI) of Cisco Firepower Threat Defense (FTD) microprogramming system allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a system reboot or cause a service failure...

6.2CVSS6.6AI score0.00497EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.15 views

The vulnerability of the command-line interface (CLI) of Cisco Firepower Threat Defense (FTD) microprogramming systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

7.8CVSS7.2AI score0.00302EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/28 4:0 p.m.6 views

CVE-2021-1476

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

7.2CVSS7AI score0.00481EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/04/28 12:0 a.m.12 views

PT-2021-2794 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file...

6.2CVSS5.9AI score0.00497EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/04/14 12:0 a.m.9 views

The vulnerability of the command-line interface (CLI) of Cisco IOS XE SD-WAN microprogramming software allows a attacker to execute arbitrary commands with superuser privileges.

The vulnerability of the command-line interface CLI of Cisco IOS XE SD-WAN software exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows an attacker to execute arbitrary commands with superuser privileges...

7.3CVSS7.5AI score0.0034EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2021/04/08 4:15 a.m.21 views

CVE-2021-1485

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges on the underlying Linux operating system OS of an affected device. This vulnerability is due to insufficient input validation of...

7.8CVSS0.00322EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.8 views

The vulnerability of the Cisco IOS XE software’s command-line interface allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Cisco IOS XE software’s command-line interface is related to the existence of an undocumented feature in command input fields that allows for the manipulation of variable values. Exploiting this vulnerability could enable a perpetrator to compromise the confidentiality an...

5.2CVSS6.7AI score0.00328EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.10 views

The vulnerability of the CLI component in Cisco IOS XE routers for Cisco IOS XE SD-WAN allows a attacker to gain access to the basic operating system with superuser privileges.

The vulnerability of Cisco IOS XE operating system routers in Cisco IOS XE SD-WAN devices exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the basic operating system with superuser privileges...

6.8CVSS6.7AI score0.0028EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/03/25 12:0 a.m.18 views

Cisco IOS XE Path Traversal Vulnerability (CNVD-2021-22913)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A path traversal vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker could exploit...

4.7CVSS6.6AI score0.00313EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/25 12:0 a.m.24 views

Cisco IOS XE Parameter Injection Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A parameter injection vulnerability exists in the CLI for SD-WAN on Cisco IOS XE. The vulnerability stems from insufficient input validation of certain CLI commands. An attacker...

7.2CVSS7AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.6 views

Cisco IOS XE SD-WAN Software 参数注入漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A parameter injection vulnerability exists in the CLI for SD-WAN on Cisco IOS XE. The vulnerability stems from insufficient input validation of certain CLI commands. An attacker...

7.2CVSS6.7AI score0.0028EPSS
SaveExploits0References3
Rows per page
Query Builder