CVE-2018-0148

A vulnerability in the web-based management interface of Cisco UCS Director Software and Cisco Integrated Management Controller IMC Supervisor Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected...

CVE-2018-0206

The CVE affects Cisco Unified Communications Manager (CUCM) web-based management interface. It stems from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to trigger a reflected cross-site scripting (XSS) attack by guiding a user to click a crafted link...

CVE-2018-0148

CVE-2018-0148 affects Cisco UCS Director Software and Cisco IMC Supervisor Software, where the web-based management interface is vulnerable to cross-site request forgery (CSRF). An unauthenticated, remote attacker can induce an authenticated user to click a malicious link, enabling arbitrary acti...

CVE-2018-0145

CVE-2018-0145 affects Cisco Data Center Analytics Framework (DCAF) web-based management interface. Vulnerability: reflected cross-site scripting (XSS) due to insufficient input validation. Condition: unauthenticated, remote attacker can lure a user to click a malicious link, enabling arbitrary sc...

CVE-2018-0129

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is du...

CVE-2018-0129

CVE-2018-0129 is a reflected cross-site scripting (XSS) vulnerability in Cisco Data Center Analytics Framework (DCAF) web-based management interface. Unauthenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution in the user’s browser context or ...

Cisco Data Center Analytics Framework Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

Claymore Dual Miner Denial of Service Vulnerability

Claymore Dual Miner is a GPU monitoring software for mining virtual currency computing. A security vulnerability exists in the remote management interface in Claymore Dual Miner 10.5 and earlier versions. A remote attacker could exploit this vulnerability to read memory or cause a denial of servi...

CVE-2018-6317

CVE-2018-6317 affects Claymore’s Dual Miner remote management interface. Versions 10.5 and earlier are vulnerable to an unauthenticated format-string vulnerability that can read memory or cause a denial of service. A fixed version is 10.6 (per 1337DAY entry). Public references show exploit/media ...

CVE-2017-15531

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter...

Session fixation

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter...

SA158: Improper Restriction of Excessive Authentication Attempts in Reporter

SUMMARY Symantec Reporter does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter. AFFECTED PRODUCTS Reporter --- CVE | Affected Versions | Remediation CVE-2017-15531 | 10...

Unspecified Vulnerability in Oracle Financial Services Profitability Management Component (CNVD-2018-01706)

Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management, of which Oracle Financial Services Profitability Management is a financial services profitability management component. Oracle Financial Services...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2018-02369)

Cisco Web Security Appliance WSA is a set of Web security appliances from Cisco USA. The appliance provides SaaS-based access control, real-time network reporting and tracking, and the development of security policies. A cross-site scripting vulnerability exists in the web-based management...

Cisco NX-OS System Software Management Denial of Service Vulnerability

Cisco Multilayer Director Switches and others are switch products from Cisco USA. the Cisco NX-OS System Software is a set of software that runs in the switch. A denial of service vulnerability exists in the management interface access control list ACL configuration of the Cisco NX-OS System...

Cisco D9800 Network Transport Receiver Command Injection Vulnerability

The Cisco D9800 Network Transport Receiver is a network transport receiver from Cisco that provides hardware configuration and download capabilities. the Web management GUI is one of the Web management interfaces. An operating system command injection vulnerability exists in the Web management GU...

CVE-2018-0090

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

Cross site scripting

A vulnerability in the web-based management interface of Cisco WAP150 Wireless-AC/N Dual Radio Access Point with Power over Ethernet PoE and WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attac...

Race condition

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

CVE-2018-0090

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...