Lucene search
K

6 matches found

Vulnrichment
Vulnrichment
added 2024/10/02 4:54 p.m.17 views

CVE-2024-20444 Cisco Nexus Dashboard Fabric Controller REST API Command Injection Vulnerability

A vulnerability in Cisco Nexus Dashboard Fabric Controller NDFC, formerly Cisco Data Center Network Manager DCNM, could allow an authenticated, remote attacker with network-admin privileges to perform a command injection attack against an affected device. This vulnerability is due to insufficient...

5.5CVSS7.4AI score0.0076EPSS
Exploits0References1
OSV
OSV
added 2023/09/13 1:15 p.m.4 views

CVE-2023-25608

An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all...

6.5CVSS5.9AI score0.00496EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/06/09 12:0 a.m.4 views

The vulnerability of FortiWeb web applications’ network firewalls, related to writing beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of FortiWeb web applications’ network firewalls is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted command arguments...

7.8CVSS7.8AI score0.00192EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/02/16 7:15 p.m.3 views

CVE-2023-25602

A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versions 6.1.2 and earlier, FortiWeb versions 6.0.7 and earlier, FortiWeb versions 5.9.1 and earlier, FortiWeb 5.8 all versions, FortiWeb 5.7 al...

7.8CVSS6.3AI score
Exploits0References1
OSV
OSV
added 2021/03/24 9:15 p.m.6 views

CVE-2021-1423

A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points AP could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit...

4.4CVSS7.1AI score
Exploits0References1
NVD
NVD
added 2017/05/22 1:29 a.m.20 views

CVE-2017-6650

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...

7.8CVSS7.7AI score0.00886EPSS
Exploits0References3
Rows per page
Query Builder