Cisco Data Center Network Manager SQL Injection Vulnerability (CNVD-2021-09306)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A SQL injection vulnerability exists in the REST API endpoint of Cisco Data Center...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2021-09947)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A cross-site scripting vulnerability exists in the Web management interface of Cis...

PT-2021-1923 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The issue is due to insufficient...

PT-2021-1954 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1813 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2021-1815 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1868 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

The vulnerability of the Windows operating system arises from insufficient checking of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-1678 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A vulnerability in Microsoft Office exists due to insufficient input validation. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the...

PT-2021-1686 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is due to insufficient input validation in the HEVC Video Extension codec. This can allow a remote attacker to execute arbitrary code. Recommendations: At the moment...

PT-2021-1602 · Microsoft · Windows Projected File System Fs Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System FS Filter Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Windows operating system. It allows attackers to obtain sensitive information and...

PT-2021-1845 · Microsoft · Sharepoint Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft 365 Apps affect...

PT-2021-1597 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue exists due to insufficient input validation in the Remote Procedure Call runtime. It allows remote attackers to execute arbitrary code and affect the system. Recommendations: At t...

PT-2021-1575 · Microsoft +3 · Visual Studio +5

Name of the Vulnerable Software and Affected Versions: ASP.NET Core and Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in ASP.NET Core and Visual Studio, which can lead to a denial-of-service condition. This can be exploited by a...

HCL Domino Denial of Service Vulnerability (CNVD-2020-75064)

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino 10 and 11. The vulnerability stems from insufficient input validation to the public API. An attacker could exploit the vulnerability to cause the Domino server to cras...

The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server software lies in insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

CVE-2020-9137

There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...