23 matches found
EUVD-2019-16412
Malware in sbrugna...
EUVD-2014-7515
Malware in sbrugna...
MAL-2025-23682 Malicious code in javascript-msx-sdk (npm)
The package javascript-msx-sdk was found to contain malicious code...
Malicious code in javascript-msx-sdk (npm)
The package javascript-msx-sdk was found to contain malicious code...
CVE-2019-6858
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
Malicious code in @csmsce/msx-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0fc7c362db232e6c3dff94d78d7360704684a2c76d019283f6f1d3e86b3e6e8 The OpenSSF Package Analysis project identified '@csmsce/msx-types' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
CVE-2021-1266
A vulnerability in the REST API of Cisco Managed Services Accelerator MSX could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the way that the affected software logs certain API requests. An attacker could...
Design/Logic Flaw
A vulnerability in the REST API of Cisco Managed Services Accelerator MSX could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the way that the affected software logs certain API requests. An attacker could...
CVE-2021-1266
CVE-2021-1266 affects Cisco Managed Services Accelerator (MSX). The REST API vulnerability arises from how the software logs certain API requests, which an authenticated, remote attacker can exploit by sending a flood of crafted API requests, potentially causing a DoS on the affected device. Conn...
CVE-2019-15974
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
Design/Logic Flaw
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
CVE-2019-15974 Cisco Managed Services Accelerator Open Redirect Vulnerability
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
CVE-2019-15974
Cisco MSX Open Redirect vulnerability (CVE-2019-15974) affects Cisco Managed Services Accelerator web interface. Improper input validation of HTTP request parameters enables an unauthenticated, remote attacker to induce user redirection to a malicious URL. Exploitation could be achieved by interc...
CVE-2019-15974 Cisco Managed Services Accelerator Open Redirect Vulnerability
A vulnerability in the web interface of Cisco Managed Services Accelerator MSX could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this...
CVE-2019-6858
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
Path traversal
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
CVE-2019-6858
A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...
CVE-2019-6858
CVE-2019-6858 affects MSX Configurator (software) prior to version V1.0.8.1. The vulnerability is CWE-427: Uncontrolled Search Path Element, which could lead to privilege escalation by injecting a malicious DLL. The public description confirms a local impact with partial to high confidentiality/i...
schneider MSX Configurator suffers from dll hijacking vulnerability
Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. A dll hijacking vulnerability exists in schneider MSX Configurator. An attacker can exploit this vulnerability to load a malicious dll and execute...
Information disclosure
The Go MSX MLS aka com.doapps.android.realestate.RE16b9c09c4d5b0e174208f35e7c49f9a0 application 2.3.4.MR3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...