Lucene search
K

1775 matches found

OSV
OSV
added 2021/03/24 8:15 p.m.1 views

CVE-2021-1383

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these...

6.7CVSS6.8AI score
Exploits0References2
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.3 views

Cisco IOS XE SD-WAN Software 注入漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary command execution vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker...

7.3CVSS7.6AI score0.0034EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.3 views

Cisco IOS XE SD-WAN Software 安全漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary file overwrite vulnerability exists in the CLI for SD-WAN for Cisco IOS XE. The vulnerability stems from insufficient validation of parameters for specific CLI...

6.6CVSS6.7AI score0.0023EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.4 views

Cisco IOS XE SD-WAN Software 路径遍历漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A path traversal vulnerability exists in the CLI for SD-WAN in Cisco IOS XE. The vulnerability stems from insufficient validation of user-supplied input. An attacker could exploit...

4.7CVSS6.1AI score0.00313EPSS
Exploits0References3
Ubuntu
Ubuntu
added 2021/03/15 9:3 p.m.21 views

USN-4785-1: npm vulnerability

It was discovered that the npm command-line interface mishandled certain sensitive information. An attacker could use this vulnerability to collect authentication information that could be used to impersonate other users...

7.5CVSS7.5AI score0.06748EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.2 views

The vulnerability of the command-line interface (CLI) of the vManage web interface for programmatically defined Cisco SD-WAN networks allows a attacker to compromise the integrity of protected information.

The vulnerability of the command-line interface CLI of the vManage web interface for the Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

4.6CVSS5.4AI score0.00164EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/11 12:0 a.m.1 views

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management tool and the Fortinet FortiAnalyzer event monitoring and analysis tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software and the Fortinet FortiAnalyzer security event monitoring and analysis tool is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker,...

7.8CVSS7.2AI score0.02239EPSS
Exploits1References2Affected Software2
CNNVD
CNNVD
added 2021/03/05 12:0 a.m.2 views

Aruba AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A command injection vulnerability exists in the CLI of Aruba Networks...

9CVSS6.3AI score0.02887EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2021/03/02 3:33 p.m.47 views

CVE-2020-25715

A flaw was found in pki-core. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting XSS attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity. Mitigation Because the...

6.1CVSS1.4AI score0.01142EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.1 views

The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges

The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00449EPSS
Exploits0References2
NVD
NVD
added 2021/02/16 8:15 p.m.9 views

CVE-2021-20074

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

9CVSS0.0124EPSS
Exploits0References1
Prion
Prion
added 2021/02/16 8:15 p.m.11 views

Design/Logic Flaw

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands...

9CVSS8.9AI score0.0124EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.1 views

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface CLI is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00343EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/02/09 12:0 a.m.5 views

PT-2021-2173 · Microsoft · Azure Iot Cli Extension

Name of the Vulnerable Software and Affected Versions: Azure IoT CLI extension affected versions not specified Description: The issue is related to errors in privilege management in the Azure IoT CLI interface. Exploitation of this issue may allow an attacker to elevate their privileges...

7.8CVSS6.6AI score0.00449EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.1 views

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

6.1CVSS7.2AI score0.01441EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:0 a.m.1 views

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.2AI score0.01348EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:0 a.m.2 views

The vulnerability of the command-line interface of the programmatically defined Cisco SD-WAN network allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of Cisco SD-WAN programs exists due to insufficient validation of input data in iperf. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.4AI score0.0032EPSS
Exploits0References2Affected Software1
Citrix
Citrix
added 2021/02/04 12:0 a.m.5 views

Hotfix XS82E016 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX291439 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.3 views

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software allows a hacker to obtain information about users of the CMX system.

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain access and disclose information about users of the CMX system...

4.3CVSS5.5AI score0.00734EPSS
Exploits0References3Affected Software1
Gitee
Gitee
added 2021/01/22 11:51 p.m.4 views

hackingtool

This repository is an offensive tool for a comprehensive hacking toolkit. The primary vulnerability class targeted is not explicitly stated, but the tool includes various modules for exploitation, reverse engineering, and post-exploitation. The probable entry points for this tool are scripts and...

8.2AI score
Exploits0
Rows per page
Query Builder