Lucene search
K

1001 matches found

CNNVD
CNNVD
added 2021/04/21 12:0 a.m.3 views

Cisco SD-WAN vManage 代码问题漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A code issue vulnerability exists in Cisco SD-WAN vManage Software, which could be exploited by an attacker to read or write files in an...

6.4CVSS5.8AI score0.00859EPSS
Exploits0References6
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.2 views

Cisco SD-WAN vManage 输入验证错误漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage Software has an input validation error vulnerability that originates as a result of insufficient authorization checks. ...

6.4CVSS5.6AI score0.00608EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.4 views

Cisco SD-WAN vManage 参数注入漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A parameter injection vulnerability exists in Cisco SD-WAN vManage Software that stems from improper validation of user-supplied device...

6.5CVSS5.5AI score0.01192EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.3 views

Cisco SD-WAN vManage 后置链接漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage suffers from a backlink vulnerability that stems from an insufficient file range restriction. An attacker could exploit...

6.5CVSS5.8AI score0.01316EPSS
Exploits0References4
OSV
OSV
added 2021/04/08 4:15 a.m.1 views

CVE-2021-1479

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details secti...

9.8CVSS7.8AI score0.01932EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/04/08 12:0 a.m.4 views

The vulnerability of the programmatically defined network management function in Cisco SD-WAN allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the programmatically defined Cisco SD-WAN remote management function is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code with root privileges...

10CVSS8.8AI score0.01932EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.1 views

The vulnerability of the CLI component in Cisco IOS XE routers for Cisco IOS XE SD-WAN allows a attacker to execute arbitrary commands with superuser privileges.

The vulnerability of Cisco IOS XE operating system-based routers in Cisco IOS XE SD-WAN solutions exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary commands with superuser privileges...

6.8CVSS7.1AI score0.00712EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.3 views

The vulnerability of the CLI component in Cisco IOS XE routers for Cisco IOS XE SD-WAN allows a attacker to gain access to the basic operating system with superuser privileges.

The vulnerability of Cisco IOS XE operating system routers in Cisco IOS XE SD-WAN devices exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the basic operating system with superuser privileges...

6.8CVSS6.7AI score0.00592EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.4 views

Cisco IOS XE 缓冲区错误漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A buffer overflow vulnerability exists in the vDaemon process for SD-WAN on Cisco IOS XE. The vulnerability stems from insufficient boundary checking when the device processes...

9.3CVSS8AI score0.02256EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/24 12:0 a.m.3 views

Cisco IOS XE SD-WAN Software 安全漏洞

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. An arbitrary file overwrite vulnerability exists in the CLI for SD-WAN for Cisco IOS XE. The vulnerability stems from insufficient validation of parameters for specific CLI...

6.6CVSS6.7AI score0.0023EPSS
Exploits0References3
OSV
OSV
added 2021/03/15 10:0 p.m.0 views

USN-4822-1 firebird2.5 vulnerability

It was discovered that Firebird exposed certain UDF libraries. An authenticated attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code...

8.8CVSS7.5AI score0.03273EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.1 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.01132EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.2 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.01064EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.3 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to execute arbitrary SQL queries.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS5.9AI score0.01041EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.2 views

The vulnerability of the command-line interface (CLI) of the vManage web interface for programmatically defined Cisco SD-WAN networks allows a attacker to compromise the integrity of protected information.

The vulnerability of the command-line interface CLI of the vManage web interface for the Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

4.6CVSS5.4AI score0.00164EPSS
Exploits0References2Affected Software1
Mageia
Mageia
added 2021/03/12 1:25 a.m.45 views

Updated postgresql packages fix security vulnerabilities

A user having an UPDATE privilege on a partitioned table but lacking the SELECT privilege on some column may be able to acquire denied-column values from an error message CVE-2021-3393. A user having a SELECT privilege on an individual column can craft a special query that returns all columns of...

4.3CVSS2.8AI score0.01466EPSS
Exploits2References2
OSV
OSV
added 2021/03/08 5:15 p.m.14 views

CVE-2021-21325

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 a new budget type can be defined by user. This input is not correctly filtered. This results in a cross-site scripting...

4.8CVSS6AI score
Exploits0References2
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.3 views

Cisco SD-WAN vManage Software 输入验证错误漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. Cisco SD-WAN vManage Software suffers from an input validation error vulnerability that stems from insufficient validation of HTTP requests. An attacker could exploit the...

4.3CVSS5.6AI score0.01132EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.13 views

Cisco SD-WAN vManage 输入验证错误漏洞

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage has an input validation error vulnerability that stems from an incomplete boundary check on data provided to the vDaemo...

5.4CVSS5.5AI score0.00601EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/01 12:0 a.m.4 views

Apache AsterixDB 路径遍历漏洞

Apache AsterixDB is Apache open source a database management software . Provides a scalable open source big data management system A security vulnerability exists in Apache AsterixDB that stems from a specially crafted zip file that can place files outside of the UDF deployment directory when...

5.5CVSS5.7AI score0.01977EPSS
Exploits0References2
Rows per page
Query Builder