30 matches found
EUVD-2019-16412
Malware in sbrugna...
EUVD-2014-7515
Malware in sbrugna...
Malicious code in javascript-msx-sdk (npm)
The package javascript-msx-sdk was found to contain malicious code...
MAL-2025-23682 Malicious code in javascript-msx-sdk (npm)
The package javascript-msx-sdk was found to contain malicious code...
CVE-2019-6858
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
Malicious code in @csmsce/msx-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0fc7c362db232e6c3dff94d78d7360704684a2c76d019283f6f1d3e86b3e6e8 The OpenSSF Package Analysis project identified '@csmsce/msx-types' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
CVE-2021-1266
A vulnerability in the REST API of Cisco Managed Services Accelerator MSX could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the way that the affected software logs certain API requests. An attacker could...
Design/Logic Flaw
A vulnerability in the REST API of Cisco Managed Services Accelerator MSX could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the way that the affected software logs certain API requests. An attacker could...
CVE-2021-1266
CVE-2021-1266 affects Cisco Managed Services Accelerator (MSX). The REST API vulnerability arises from how the software logs certain API requests, which an authenticated, remote attacker can exploit by sending a flood of crafted API requests, potentially causing a DoS on the affected device. Conn...
CVE-2021-1266: Uncontrolled Resource Consumption
A vulnerability in the REST API of Cisco Managed Services Accelerator MSX could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the way that the affected software logs certain API requests. An attacker could...
CVE-2019-15974
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
Design/Logic Flaw
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
CVE-2019-15974 Cisco Managed Services Accelerator Open Redirect Vulnerability
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
CVE-2019-15974 Cisco Managed Services Accelerator Open Redirect Vulnerability
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
CVE-2019-15974
Cisco MSX Open Redirect vulnerability (CVE-2019-15974) affects Cisco Managed Services Accelerator web interface. Improper input validation of HTTP request parameters enables an unauthenticated, remote attacker to induce user redirection to a malicious URL. Exploitation could be achieved by interc...
CVE-2019-15974: URL Redirection to Untrusted Site
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
CVE-2019-6858
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
Path traversal
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
CVE-2019-6858
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
CVE-2019-6858
CVE-2019-6858 affects MSX Configurator (software) prior to version V1.0.8.1. The vulnerability is CWE-427: Uncontrolled Search Path Element, which could lead to privilege escalation by injecting a malicious DLL. The public description confirms a local impact with partial to high confidentiality/i...