Directory traversal

A vulnerability in the CLI of Cisco Aironet Access Points APs could allow an authenticated, local attacker to access sensitive information stored in an AP. The vulnerability is due to improper sanitization of user-supplied input in specific CLI commands. An attacker could exploit this vulnerabili...

Stack overflow

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow...

The vulnerability of the Command Line Interface (CLI) of Cisco SD-WAN-enabled software-defined networks allows attackers to elevate their privileges and modify device configuration files.

The vulnerability of the Command Line Interface CLI of Cisco SD-WAN software-defined networks is related to access control violations. Exploiting this vulnerability can allow attackers to enhance their privileges and modify device configuration files by sending specially crafted commands to the...

Input validation

A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper input validation in the affected software. An...

CVE-2019-1646 Privilege Escalation Vulnerability in Cisco SD-WAN Solution

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device configuration files. The vulnerability exists because user input is not properly sanitized for certain commands at the CLI. An attacker could exploit...

CVE-2018-0431 Cisco Integrated Management Controller Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient validation of...

Memory corruption

There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service crash by sending a crafted command which will result in a code path that calls the UND undefined ARM instruction...

Cisco NX-OS Arbitrary Command Execution Vulnerability

Cisco NX-OS Software is the United States Cisco Cisco company's set of data center-oriented operating system. An input validation vulnerability exists in the role-based access detection mechanism in Cisco NX-OS Software, which stems from the program's lack of file system validation and input...

QEMU integer overflow vulnerability (CNVD-2018-11977)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An integer overflow vulnerability exists in the qmpguestfileread routine in the qga/commands-posix.c and qga/commands-win32.c files of qemu-ga...

IBM Financial Transaction Manager for ACH Services Information Disclosure Vulnerability

IBM Financial Transaction Manager FTM for ACH Services is a Financial Transaction Manager product from IBM USA, which is used to monitor, track and report on financial payments and transactions. A security vulnerability exists in IBM FTM for ACH Services version 3.0.6, which is based on multiple...

Information disclosure

Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials...

CVE-2018-1276

Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. A remote user with the ability to push apps can execute crafted commands to read the IaaS metadata from the VM, which may contain BOSH credentials...

Buffer overflow

An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is...

CVE-2018-0095

A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...

CVE-2018-0095

A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential wi...

Huawei E5756S Authentication Bypass Vulnerability

The Huawei E5756S is a Unicom 3G Internet card device from Huawei China. A security vulnerability exists in the Huawei E5756S V100R001B100D00SP00C00 version, which stems from an imperfect WebUI interface authentication mechanism. The vulnerability can be exploited by a remote attacker to view the...

CVE-2017-12843

Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted 1 SYNCAPPLY, 2 SYNCGET or 3 SYNCRESTORE command...

Cisco IOS XR Software Privilege Escalation Vulnerability (cisco-sa-20170621-ios1)

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Baby FTP server denial of service vulnerability (CNVD-2016-10479)

Baby FTP Server is a free FTP server software from Pablo Software Solutions. The software features support for RFC959 FTP commands, PASV and non-PASV connection modes, multi-threading, real-time server logs and more. Baby FTP server version 1.24 has denial-of-service vulnerabilities that stem fro...

OpenAFS Kernel Memory Leak Vulnerability - Windows

OpenAFS is prone to kernel memory leak vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openafs:openafs";...