Nagios XI autodiscovery_component Command Injection (CVE-2020-28648)

A command injection vulnerability exists in Nagios XI. The vulnerability is due to insufficient input validation of the requests submitted to the Auto-Discovery endpoint...

Kaspersky TinyCheck Command Injection Vulnerability

Kaspersky TinyCheck is a software from the Russian company Kaspersky that captures network communications from smartphones or any device that can be associated with a Wi-Fi access point. TinyCheck before commits 9fd360d and ea53de8 suffers from a command injection vulnerability that stems from...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Core component in Oracle VM VirtualBox allows a attacker to compromise data integrity.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to trigger a service failure.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2021-09947)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A cross-site scripting vulnerability exists in the Web management interface of Cis...

Cisco Data Center Network Manager SQL Injection Vulnerability (CNVD-2021-09306)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A SQL injection vulnerability exists in the REST API endpoint of Cisco Data Center...

PT-2021-1923 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center affected versions not specified Description: A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The issue is due to insufficient...

PT-2021-5476

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to insufficient input validation of the current password in the firmware of Ethernet modules. This can be exploited by a remote attacker using a special...

PT-2021-1813 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1815 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1954 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1868 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1650

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise...

PT-2021-1644

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a highly privileged attacker with logon access to the infrastructure wher...

PT-2021-1649

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue can allow an attacker to cause a denial of service,...

PT-2021-1652

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue can allow an attacker to impact the confidentiality and...

PT-2021-1651

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue exists due to insufficient input validation in the Core component of Oracle VM VirtualBox. Exploitation of this issue may allow an attacker to cause a denial of service,...

PT-2021-1653

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.18 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon access to the infrastructure to...

PT-2021-1670

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 6.1.18 Description The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a highly privileged attacker with logon to the infrastructure to compromise...