Debian DLA-2610-1 : linux-4.19 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service, or information leaks. CVE-2020-27170, CVE-2020-27171 Piotr Krysiuk discovered flaws in the BPF subsystem's checks for information leaks throu...

CVE-2021-28937

Acexy Wireless-N WiFi Repeater REV 1.0 is vulnerable to a password disclosure through its web management interface. The NUCLEI template for CVE-2021-28937 notes that the /password.html page stores the administrator password in plaintext and can be intercepted over HTTP, enabling potential access ...

Cisco IOS XE Wireless Controller software cross-site scripting vulnerability

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco USA. It provides a management network function. A cross-site scripting vulnerability exists in the Cisco IOS XE Wireless Controller software, which can be exploited by an attacker to conduct a cross-site scripting...

Cisco Small Business RV132W and RV134W Routers Management Interface RCE / DoS (cisco-sa-rv-132w134w-overflow-Pptt4H2p)

According to its self-reported version, Cisco Small Business Routers RV132W and RV134W are affected by a vulnerability in the web-based management interface. This flaw could allow an authenticated, remote attacker to execute arbitrary code as the root user or to cause device reload. TRUSTED...

CVE-2021-1374 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against another user of the web-based management interface of an...

CVE-2021-1374

CVE-2021-1374 describes a stored cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family. The issue arises from insufficient validation of user-supplied input in the management UI. An attacker who aut...

CVE-2021-1394

A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System NCS 520 Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the web management interface of an affected device. This vulnerability is due ...

CVE-2021-1394 Cisco IOS XE Software for Network Convergence System 520 Routers Denial of Service Vulnerability

A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System NCS 520 Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the web management interface of an affected device. This vulnerability is due ...

Cisco IOS XE Software for Network Convergence System 520 Routers Denial of Service Vulnerability

A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System NCS 520 Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the web management interface of an affected device. This vulnerability is due ...

思科 Cisco IOS XE Wireless Controller software 跨站脚本漏洞

Cisco IOS XE Wireless Controller software is a wireless LAN controller from Cisco USA. It provides a management network function. A cross-site scripting vulnerability exists in the Cisco IOS XE Wireless Controller software, which can be exploited by an attacker to conduct a cross-site scripting...

Cisco IOS XE Software 资源管理错误漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that allows an...

CVE-2021-1287 Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly. The...

CVE-2021-1287 Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly. The...

Cisco Small Business RV132W and RV134W Routers Management Interface Remote Command Execution and Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly. The...

Tomas Buchaillot Tyk API Gateway 路径遍历漏洞

Tomas Buchaillot Tyk API Gateway is Tomas Buchaillot an open source application . It is an open source enterprise API gateway that supports REST, GraphQL, TCP and gRPC protocols. Tomas Buchaillot Tyk API Gateway suffers from a path traversal vulnerability that stems from directory traversal by th...

F5 AWAF/ASM TMUI Remote Command Execution Vulnerability in BIGIP Appliance Mode

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIGIP Appliance mode AWAF/ASM TMUI remote command execution vulnerability, the vulnerability allows users with elevated...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIGIP AWAF/ASM Unauthorized User TMUI Remote Command Execution Vulnerability, the vulnerability allows a user with elevated...

F5 BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. The F5 BIGIP TMUI Remote Command Execution vulnerability can be exploited by an attacker to execute arbitrary system commands,...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIGIP Appliance mode AWAF/ASM TMUI remote command execution vulnerability, the vulnerability allows users with elevated...

Aruba Networks AirWave Management Platform XML External Entity Injection Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An XML External Entity Injection XXE vulnerability exists in the web...