Juniper Junos Elevation of Privilege Vulnerability (CNVD-2017-00606)

Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability in the Juniper Junos Space WEB management interface allows remote attackers to submit special requests, create privileged users, and elevate privileges...

Juniper Junos Cross-Site Scripting Vulnerability (CNVD-2017-00608)

Juniper Junos is a network operating system dedicated to the company's hardware systems. Cross-site scripting exists in the Juniper Junos Space WEB management interface, which allows remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can be used to gain acces...

Palo Alto Networks PAN-OS Management Interface Remote DoS (PAN-SA-2016-0027)

The Palo Alto Networks PAN-OS running on the remote host is affected by a NULL pointer dereference flaw in the web management interface, specifically in the parseRange function within file rx.c, when handling HTTP requests involving a Range header with an empty value. An unauthenticated, remote...

Fortinet FortiGate ZebOS routing remote shell service enabled (FG-IR-15-020)

The Fortinet FortiGate device has the ZebOS routing remote shell service enabled. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descriptio...

XFINITY Gateway Technicolor Cross-Site Request Forgery Vulnerability

XFINITY Technicolor TC dpc3941T is a gateway product for multimedia from XFINITY USA. A cross-site request forgery vulnerability exists in Technicolor TC dpc3941T devices using the dpc3941-P20-18-v303r20421733-160413a-CMCST firmware. An attacker could use this vulnerability to change the Wi-Fi...

CVE-2016-7454: Cross-Site Request Forgery (CSRF)

CSRF vulnerability on Technicolor TC dpc3941T formerly Cisco dpc3941T devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router...

CVE-2016-9202

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the affected interface on an affected device. More Information: CSCvb37346...

Design/Logic Flaw

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. More Information: CSCvb19366. Known Affected Releases: 5.4.1.6...

CVE-2016-6464

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

CVE-2016-6468

The CVE-2016-6468 issue affects Cisco Emergency Responder’s web-based management interface. A CSRF vulnerability could allow an unauthenticated, remote attacker to perform arbitrary actions on an affected device due to insufficient CSRF protections. Known affected release: 11.5(1.10000.4); known ...

PT-2016-6936

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service version 11.51 Description A vulnerability in the web management interface could allow an unauthenticated, remote attacker to view information on web pages that should be restricted...

PT-2016-6943

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center running FireSIGHT System software version 5.4.1.6 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view the Remote Storage Password...

PT-2016-7698

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliance ESA Switches versions 9.1.1-036 through 9.7.1-066 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS...

PT-2016-6940

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 11.51.10000.4 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions...

CVE-2016-6464: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

CVE-2016-9202: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the affected interface on an affected device. More Information: CSCvb37346...

CVE-2016-6468: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases:...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...

Cisco Email Security Appliance SMTP Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA Switches and Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the affected interface on an...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. The vulnerability is due to improper masking of sensitive data in the HTTP response. An...