CVE-2021-1487 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

CVE-2021-1547 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1553

CVE-2021-1553 affects Cisco Small Business 100, 300, and 500 Series Wireless Access Points. The issue is an input-validation error in the web-based management interface that allows an authenticated attacker with valid admin credentials to perform command injection and execute arbitrary commands w...

CVE-2021-1551 Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

CVE-2021-1254 Cisco Finesse Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

CVE-2021-1254

Cisco Finesse’s web-based management interface contains cross-site scripting (XSS) vulnerabilities due to insufficient validation of user-supplied input. An authenticated attacker with administrator credentials can inject malicious scripts, potentially persuading users to click malicious links an...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2021-36553)

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. Cisco Finesse suffers from a cross-site scripting vulnerability where the web-based management interface of the affected software fails to adequately validate user-supplied input. An attacker could use th...

Cisco Web Security Appliance Stored XSS (cisco-sa-wsa-xss-RuB5WGqL)

According to its self-reported version, Cisco Web Security Appliance WSA is affected by a cross-site scripting XSS vulnerability. A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a...

Cisco Finesse Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

Cisco Finesse 跨站脚本漏洞

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. Cisco Finesse suffers from a cross-site scripting vulnerability where the web-based management interface of the affected software fails to adequately validate user-supplied input. An attacker could use th...

The vulnerability of the cluster software-defined networking control interface of Cisco SD-WAN allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco SD-WAN programmatically-defined network management interface is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Brocade Fabric OS 输入验证错误漏洞

Brocade Fabric OS FOS is an embedded operating system used in devices such as switches and routers from Brocade. An input validation error vulnerability exists in Brocade Fabric OS, which can be exploited by an attacker to trigger a denial of service due to a fatal error in the Web Management...

Cisco Unified Communications Manager XSS (cisco-sa-cucm-xss-Q4PZcNzJ)

The version of cisco unified communications manager installed on the remote host is prior to version 14. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Multiple vulnerabilities in the web-based management interface of Cisco Unified CM, could allow an unauthenticated,...

SUSE SLES12 Security Update : openvpn (SUSE-SU-2021:1576-1)

This update for openvpn fixes the following issues : CVE-2020-15078: Fixed authentication bypass with deferred authentication bsc1185279. CVE-2018-7544: Fixed cross-protocol scripting issue that was discovered in the management interface bsc1085803. Note that Tenable Network Security has extracte...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

Authentication flaw

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...

CVE-2021-31520

Trend Micro IM Security web console suffers a weak session token authentication bypass (auth bypass via guessable tokens) affecting 1.6 and 1.6.5. An unauthenticated remote attacker can exploit the guessable tokens to bypass login and access the web management interface (web console on port 16373...

CVE-2021-31520

A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface...