696 matches found
CVE-2025-20304
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2025-20289
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2025-20304
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2025-20305
Cisco ISE (web-based management interface) contains an information-disclosure vulnerability where certain files lack proper data protection, enabling an authenticated, read-only administrator to view passwords normally hidden to that role. Impact is limited to confidentiality (viewing sensitive c...
CVE-2025-20289
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2025-20289
Cisco ISE and Cisco ISE-PIC's web-based management interface authenticate to users and are affected by multiple vulnerabilities allowing reflected XSS due to insufficient input validation. An authenticated, low-privilege attacker can exploit specific pages to run arbitrary script code in the user...
CVE-2025-20303
Cisco ISE and Cisco ISE-PIC web-based management interfaces have multiple vulnerabilities that allow an authenticated, remote attacker with at least a low-privileged account to perform a reflected XSS by injecting malicious input into specific pages. The issues stem from insufficient validation o...
Cisco Identity Services Engine Reflected Cross-Site Scripting and Information Disclosure Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to either disclose sensitive information or conduct a reflected cross-site scripting XSS attack. For more information about these...
PT-2025-41846
Name of the Vulnerable Software and Affected Versions YouDataSum CPAS Audit Management System versions prior to 4.9 Description The YouDataSum CPAS Audit Management System is susceptible to SQL Injection due to inadequate input validation. This allows remote, unauthenticated attackers to execute...
EUVD-2019-10216
Malware in sbrugna...
EUVD-2017-3889
Malware in sbrugna...
EUVD-2019-9253
Malware in sbrugna...
EUVD-2025-23859
Malicious code in bioql PyPI...
EUVD-2025-21709
Malicious code in bioql PyPI...
EUVD-2023-24349
Malicious code in bioql PyPI...
EUVD-2024-18191
Malicious code in bioql PyPI...
EUVD-2023-24387
Malicious code in bioql PyPI...
EUVD-2025-21708
Malicious code in bioql PyPI...