CVE-2018-15457 Cisco Prime Infrastructure Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient...

CVE-2018-15457

CVE-2018-15457 affects Cisco Prime Infrastructure web-based management interface. The vulnerability arises from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack by convincing a user to click a malicious lin...

CVE-2018-0482

Cisco Prime Network Control System (NCS) web-based management interface contains a stored XSS vulnerability due to insufficient validation of user-supplied input. An authenticated, remote attacker could lure a user into clicking a malicious link, causing arbitrary script execution in the web inte...

CVE-2018-0474

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

CVE-2018-0482

A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient...

CVE-2018-0474 Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

CVE-2018-0676

BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors...

The vulnerability of Cisco Enterprise NFV Infrastructure Software’s software lies in errors during the checking of HTTP requests in the management interface, which allows attackers to perform inter-site forged requests.

The vulnerability of Cisco Enterprise NFV Infrastructure Software-related software lies in the improper checking of HTTP requests in the management interface. Exploiting this vulnerability allows a remote attacker to perform inter-site forged requests...

Pulse Secure Virtual Traffic Manager Cross-Site Scripting Vulnerability

Pulse Secure Virtual Traffic Manager is a software-based, high-performance application delivery controller from Pulse Secure, USA. A cross-site scripting vulnerability exists in the web management user interface in Pulse Secure Virtual Traffic Manager versions 9.9 prior to 9.9r2 and versions prio...

CVE-2018-15465

A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, but unprivileged levels 0 and 1, remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of...

CVE-2018-15465

CVE-2018-15465 affects Cisco ASA software, where the authorization subsystem fails to properly validate user privileges in the web management interface. An authenticated but unprivileged user (levels 0/1) can issue specific HTTPS requests to perform privileged actions, potentially exposing sensit...

Cisco Adaptive Security Appliances Software authorization subsystem remote elevation of privilege vulnerability

Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of Cisco Cisco running in the firewall operating system. authorization subsystem is one of the authorization subsystem. A remote elevation of privilege vulnerability exists in the authorization subsystem in Cis...

Tarantella Enterprise Security Bypass Access Control Vulnerability

Tarantella Enterprise is a centralized data and application management tool that provides a Web management interface and runs on most Unix and Linux platforms. A security vulnerability exists in Tarantella Enterprise versions prior to 3.11. The vulnerability can be exploited to gain access to use...

Netgate pfSense CE Command Injection Vulnerability (CNVD-2018-26996)

Netgate pfSense CE is the United States Netgate company's set of free open source FreeBSD-based firewall and router software. A command injection vulnerability exists in the 'powerdnormalmode' parameter in Netgate pfSense CE version 2.4.4-RELEASE, which can be exploited by an attacker to execute...

Linux Kernel Aug 2017 - Sep 2018 Vulnerabilities

SUMMARY Symantec Network Protection products that include a vulnerable version of the Linux kernel are susceptible to multiple vulnerabilities. A remote attacker, with access to the management interface, can obtain unauthorized read/write access to local files, cause denial of service, and possib...

CVE-2018-15451 Cisco Prime Service Catalog Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplie...

CVE-2018-15449 Cisco Video Surveillance Media Server Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service DoS of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of...

CVE-2018-15449 Cisco Video Surveillance Media Server Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Video Surveillance Media Server could allow an unauthenticated, remote attacker to cause a denial of service DoS of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of...

Cross site request forgery (csrf)

A vulnerability in the web-based management interface of Cisco Energy Management Suite Software could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

CVE-2018-15445

CVE-2018-15445 affects Cisco Energy Management Suite’s web-based management interface. The issue is insufficient CSRF protections, enabling an authenticated remote attacker to persuade a logged-in user to click a crafted link and perform arbitrary actions in the user’s browser session, i.e., with...