CVE-2019-15990 Cisco Small Business Routers RV016, RV042, RV042G, and RV082 Information Disclosure Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An...

CVE-2019-15994 Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

CVE-2019-15956

A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...

CVE-2019-15973 Cisco Industrial Network Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected application. The vulnerability is due to insufficient validati...

Cisco Stealthwatch Enterprise Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability

According to its self-reported version, Cisco Identity Services Engine Software is affected by a vulnerability. A cross-site scripting XSS vulnerability exists in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to...

Vulnerability discovered in F5 BIG-IP and BIG-IQ

F5 has discovered a vulnerability in BIG-IP and BIG-IQ products. The vulnerability is located in lodash version 4.17.12, a javascript programming library. A malicious person with access to the Traffic Management User Interface TMUI or the iControl REST API could exploit the vulnerability to execu...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2020-31993)

The Cisco Web Security Appliance WSA is a web security appliance from Cisco USA. The appliance provides SaaS-based access control, real-time web reporting and tracking, and development of security policies. A cross-site scripting vulnerability exists in the Web management interface in versions...

GHSA-7QQR-3PJ3-Q2F5 XSS issues in the management interface

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface...

Cisco Web Security Appliance Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface of an affected device. The vulnerability is due to insufficient validation of...

Arbitrary Command Execution Vulnerability in Multiple Cisco Products

Cisco RV016 Multi-WAN VPN Router and so on are a VPN virtual private network router from Cisco. An arbitrary command execution vulnerability exists in the Web management interface of several Cisco products, which stems from the program's failure to validate the input of HTTP payloads, and can be...

Cisco Video Communications Server Command Injection Vulnerability

Cisco Video Communications Server VCS is a video communications server for videoconferencing solutions from the U.S. company Cisco Cisco. A command injection vulnerability exists in Cisco VCS X versions prior to 7.0.3, which stems from the possibility that the program may fail to properly handle...

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to cause a service failure.

The vulnerability of the web interface for managing Microprogramming-based IP phones from the Cisco SPA100 series is related to errors during the verification of user requests sent to the web management interface. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability (CNVD-2019-39612)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

CVE-2019-18225

An issue was discovered in Citrix Application Delivery Controller ADC and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain...

Authentication flaw

An issue was discovered in Citrix Application Delivery Controller ADC and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability (CNVD-2019-36460)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...

Cisco SPA100 Series Analog Telephone Adapters Buffer Overflow Vulnerability (CNVD-2019-36458)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series of analog telephone adapters from Cisco USA. A buffer overflow vulnerability exists in the Cisco SPA100 Series ATAs, which arises from a program's failure to properly validate user-submitted input, and can be exploited to...