Lucene search
+L

844 matches found

NVD
NVD
added 2022/07/19 3:15 p.m.33 views

CVE-2022-2193

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1...

8.8CVSS0.00835EPSS
Exploits0References1
OSV
OSV
added 2022/07/19 3:15 p.m.9 views

CVE-2022-2193

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1...

8.8CVSS5.9AI score0.00835EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/19 3:15 p.m.4 views

CVE-2022-2193

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1...

8.8CVSS7.3AI score0.00835EPSS
Exploits0References2
CVE
CVE
added 2022/07/19 2:7 p.m.66 views

CVE-2022-2193

HYPR Server contains an Insecure Direct Object Reference (IDOR) in the Device Manager page. Remote authenticated attackers can tamper parameters to add a FIDO2 authenticator to arbitrary accounts. Affected: HYPR Server versions prior to 6.14.1. Remediation: upgrade to 6.14.1 or later.

8.8CVSS8.2AI score0.00835EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/24 12:0 a.m.9 views

The vulnerability of the check function of the Cisco Adaptive Security Device Manager (ASDM) in the Cisco Adaptive Security Appliance Software (ASA) allows a hacker to execute arbitrary code.

The vulnerability of the Cisco Adaptive Security Device Manager ASDM verification function in the Cisco Adaptive Security Appliance Software ASA lies in insufficient data authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a specially crafte...

10CVSS7.9AI score0.03206EPSS
Exploits1References3Affected Software2
Cisco
Cisco
added 2022/06/22 4:0 p.m.83 views

Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

A vulnerability in the packaging of Cisco Adaptive Security Device Manager ASDM images and the validation of those images by Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker with administrative privileges to upload an ASDM image that contains malicious...

9.1CVSS7.8AI score0.03206EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/22 4:0 p.m.9 views

CVE-2022-20829

A vulnerability in the packaging of Cisco Adaptive Security Device Manager ASDM images and the validation of those images by Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker with administrative privileges to upload an ASDM image that contains malicious...

9.1CVSS7.7AI score0.03206EPSS
Exploits1References4
NVD
NVD
added 2022/06/22 2:15 p.m.37 views

CVE-2022-20651

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

5.5CVSS0.00424EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/06/22 1:55 p.m.39 views

CVE-2022-20651 Cisco Adaptive Security Device Manager Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Adaptive Security Device Manager ASDM could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. Cisco ADSM must be deployed in a shared workstation environment for this issue to be exploited...

5.5CVSS5.5AI score0.00424EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/06/22 12:0 a.m.5 views

多款Cisco产品数据伪造问题漏洞

Cisco Adaptive Security Appliances Software ASA Software and Cisco Adaptive Security Device Manager are both products of Cisco, Inc.Cisco Adaptive Security Appliances Software is a firewall and network security platform. The platform provides highly secure access to data and network resources, et...

9.1CVSS7.8AI score0.03206EPSS
Exploits1References7
OSV
OSV
added 2022/06/13 4:15 p.m.4 views

CVE-2021-46812

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS5.8AI score0.00519EPSS
Exploits0References2
NVD
NVD
added 2022/06/13 4:15 p.m.28 views

CVE-2021-46812

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS0.00519EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/13 4:15 p.m.6 views

CVE-2021-46812

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS7.2AI score0.00519EPSS
Exploits0References3Affected Software2
Prion
Prion
added 2022/06/13 4:15 p.m.18 views

Design/Logic Flaw

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity...

5CVSS7.5AI score0.00519EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2022/06/13 3:4 p.m.63 views

CVE-2021-46812

Technical details about CVE-2021-46812 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

7.5CVSS7.5AI score0.00519EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2022/06/13 3:4 p.m.27 views

CVE-2021-46812

The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity...

7.7AI score0.00519EPSS
Exploits0References2
OSV
OSV
added 2022/06/07 6:15 p.m.4 views

CVE-2020-36531

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely...

8.8CVSS5.5AI score0.00769EPSS
Exploits0References2
NVD
NVD
added 2022/06/07 6:15 p.m.30 views

CVE-2020-36531

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely...

8.8CVSS0.00769EPSS
Exploits0References2
Prion
Prion
added 2022/06/07 6:15 p.m.17 views

Code injection

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely...

6CVSS8.8AI score0.00769EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/03 7:10 p.m.7 views

CVE-2020-36531 SevOne Network Management System Device Manager Page injection

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely...

6.3CVSS9.1AI score0.00769EPSS
Exploits0References2
Rows per page
Query Builder