Lucene search
+L

4260 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.29 views

Cisco Data Center Network Manager readConfigFileFromDBAsXML Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...

6.5CVSS2.1AI score0.14322EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.34 views

Cisco Data Center Network Manager TrustedClientTokenValidator Hard-coded Cryptographic Key Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Data Center Network Manager. The specific flaw exists within the processing of the dbadmin/addUser functionality. The issue results from trusting input that has been encrypted with a hard-coded...

9.8CVSS1.8AI score0.96455EPSS
SaveExploits7References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.23 views

Cisco Data Center Network Manager getAllVpc SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

7.2CVSS4.4AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.25 views

Cisco Data Center Network Manager getHostEnclDataLength SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.4AI score0.46935EPSS
SaveExploits10References1
CNVD
CNVD
added 2020/01/03 12:00 a.m.8 views

Cisco Data Center Network Manager XML External Entity Read Access Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An XML external entity read access vulnerability exists in the SOAP API of Cisco...

4.9CVSS6.6AI score0.01306EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/03 12:00 a.m.18 views

Cisco Data Center Network Manager REST API Authentication Bypass Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A REST API authentication bypass vulnerability exists in Cisco Data Center Network...

10CVSS7.3AI score0.96455EPSS
SaveExploits7References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.23 views

Cisco Data Center Network Manager getGirTaskLength SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...

4.9CVSS2.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.21 views

Cisco Data Center Network Manager getVsanDataLength SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within th...

4.9CVSS2.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.35 views

Cisco Data Center Network Manager getFlowStatList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS5.4AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.25 views

Cisco Data Center Network Manager getVpcCount SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.2AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.30 views

Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.27 views

Cisco Data Center Network Manager getList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.1AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.23 views

Cisco Data Center Network Manager getJobList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.33 views

Cisco Data Center Network Manager getTopologyVlanList XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the getTopologyVlanList SOAP...

7.5CVSS2.6AI score0.01306EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.20 views

Cisco Data Center Network Manager getOidSanStatList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.30 views

Cisco Data Center Network Manager getLanIslStatJoinList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.9AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.31 views

Cisco Data Center Network Manager getPortGroupMember SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.7AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.23 views

Cisco Data Center Network Manager getOidLanStatList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.27 views

Cisco Data Center Network Manager getSanZoneList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.3AI score0.46935EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2020/01/03 12:00 a.m.31 views

Cisco Data Center Network Manager getLanStatEntities SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.9AI score0.46935EPSS
SaveExploits10References1
Rows per page
Query Builder