Lucene search
+L

721 matches found

CNNVD
CNNVD
added 2021/01/20 12:0 a.m.10 views

Cisco DNA Center 操作系统命令注入漏洞

Cisco DNA Center is the network management and command center for Cisco DNA. A command injection vulnerability exists in the Command Runner tool in Cisco DNA Center versions prior to 1.3.1.0. The vulnerability stems from insufficient input validation of the Command Runner tool. An attacker could...

9.6CVSS7.6AI score0.03725EPSS
SaveExploits0References4
HackRead
HackRead
added 2021/01/16 7:20 p.m.43 views

UK Police mistakenly deleted 150,000 arrest records in software glitch

By Waqas Reportedly, a software glitch wiped DNA and fingerprint data from the police computer. This is a post from HackRead.com Read the original post: UK Police mistakenly deleted 150,000 arrest records in software glitch...

1.9AI score
SaveExploits0
CNVD
CNVD
added 2021/01/14 12:0 a.m.7 views

Cisco DNA Center Cross-Site Scripting Vulnerability (CNVD-2021-03567)

Cisco DNA Center is the network management and command center for Cisco DNA. A cross-site scripting vulnerability exists in the Web management interface of Cisco DNA Center versions prior to 2.2.1.0. The vulnerability stems from the Web management interface not properly validating user-supplied...

4.8CVSS6.9AI score0.00817EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/13 10:15 p.m.25 views

CVE-2021-1130

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

4.8CVSS4.9AI score0.00817EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/13 10:15 p.m.5 views

CVE-2021-1130

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

4.8CVSS6AI score0.00817EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/13 10:15 p.m.24 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

3.5CVSS4.9AI score0.00817EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/01/13 9:20 p.m.78 views

CVE-2021-1130

Cisco DNA Center suffers a Cross-Site Scripting (XSS) vulnerability in its web-based management interface. The flaw arises from improper validation of user-supplied input, enabling an authenticated attacker to lure a user into clicking a crafted link, which could allow execution of arbitrary scri...

4.8CVSS4.9AI score0.00817EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/13 9:20 p.m.26 views

CVE-2021-1130 Cisco DNA Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

4.8CVSS5.2AI score0.00817EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/01/13 9:20 p.m.11 views

CVE-2021-1130 Cisco DNA Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

4.8CVSS6AI score0.00817EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/01/13 4:0 p.m.63 views

Cisco DNA Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

4.8CVSS4.9AI score0.00817EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/13 12:0 a.m.8 views

Cisco DNA Center 跨站脚本漏洞

Cisco DNA Center is the network management and command center for Cisco DNA. A cross-site scripting vulnerability exists in the Web management interface of Cisco DNA Center versions prior to 2.2.1.0. The vulnerability stems from the Web management interface not properly validating user-supplied...

4.8CVSS6AI score0.00817EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/01/13 12:0 a.m.6 views

PT-2021-1646 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: The issue is related to the web-based management interface of Cisco DNA Center software, which does not properly validate user-supplied input. This could allow an authenticated,...

5.5CVSS4.9AI score0.00817EPSS
SaveExploits0References5
Schneier on Security
Schneier on Security
added 2021/01/08 10:2 p.m.45 views

Friday Squid Blogging: Searching for Giant Squid by Collecting Environmental DNA

The idea is to collect and analyze random DNA floating around the ocean, and using that to figure out where the giant squid are. No one is sure if this will actually work. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blo...

2.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.6 views

The vulnerability in the web interface for managing data collection and aggregation from Cisco DNA Spaces Connector controllers and access points allows a hacker to execute arbitrary commands.

The vulnerability in the web interface for managing data collection and aggregation from Cisco DNA Spaces Connector controllers and access points is related to the failure to eliminate special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor...

9.7CVSS8.1AI score0.02451EPSS
SaveExploits0References2Affected Software1
HackRead
HackRead
added 2020/12/02 9:21 a.m.25 views

Malware attack can trick biologists into producing dangerous toxins

By Deeba Ahmed Researchers urge for improving bio-cybersecurity as threat actors can use malware to target Synthetic DNA Orders to modify DNA strings sequence. This is a post from HackRead.com Read the original post: Malware attack can trick biologists into producing dangerous toxins...

3.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/12/02 12:0 a.m.46 views

Cisco DNA Spaces Connector Command Injection Vulnerability (cisco-sa-dna-cmd-injection-rrAYzOwc)

A command injection vulnerability exists in Cisco DNA Spaces Connector due to insufficient validation of user-supplied input in the web-based management interface. An unauthenticated, remote attacker can exploit this, by sending crafted HTTP requests to the web-based management interface, to...

10CVSS8.9AI score0.02451EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/12/01 12:0 a.m.15 views

Cisco DNA Spaces Connector Web Detection.

Binary data ciscodnaspacesconnectorwebdetect.nbin...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/11/19 12:0 a.m.5 views

Cisco DNA Spaces Connector Command Injection Vulnerability

Cisco DNA Spaces: Connector is used to connect Cisco DNA Spaces to a Cisco wireless controller. A command injection vulnerability exists in the Web management interface of the Cisco DNA Spaces Connector version 2.2 and earlier. The vulnerability stems from insufficient validation of user-supplied...

10CVSS8.2AI score0.02451EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/18 7:15 p.m.19 views

CVE-2020-3586

A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient validation of user-supplied input in the web-based management interface...

10CVSS9.7AI score0.02451EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/18 7:15 p.m.7 views

CVE-2020-3586

A vulnerability in the web-based management interface of Cisco DNA Spaces Connector could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insufficient validation of user-supplied input in the web-based management interface...

9.8CVSS7.5AI score0.02451EPSS
SaveExploits0References1
Rows per page
Query Builder