CVE-2017-12344

Cisco DCNM Software contains multiple vulnerabilities described in CVE-2017-12344 involving the web interface: an HTTP injection/input-validation failure in DCNM’s HTTP headers/parameters could let a remote attacker inject arbitrary configuration values, redirect users to malicious sites, and inj...

CVE-2017-12344

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12343

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12347

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12345

Multiple vulnerabilities in Cisco Data Center Network Manager DCNM Software could allow a remote attacker to inject arbitrary values into DCNM configuration parameters, redirect a user to a malicious website, inject malicious content into a DCNM client interface, or conduct a cross-site scripting...

CVE-2017-12347

CVE-2017-12347 affects Cisco Data Center Network Manager (DCNM) Software. Connected documents confirm multiple vulnerabilities in DCNM that could allow a remote attacker to inject arbitrary values into configuration parameters, redirect users to malicious sites, inject content into a DCNM client ...

CVE-2017-12346

CVE-2017-12346 affects Cisco Data Center Network Manager (DCNM). Connected documents confirm multiple vulnerabilities in DCNM Software that could let a remote attacker inject arbitrary values into DCNM configuration parameters, redirect users to malicious websites, inject content into a DCNM clie...

connman 'src/dnsproxy.c' stack buffer overflow vulnerability

connman is a software that uses d-bus as an inter-process communication mechanism to manage linux network links. A stack buffer overflow vulnerability exists in connman 'src/dnsproxy.c'. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application....

Authentication flaw

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an...

CVE-2017-7934

CVE-2017-7934 concerns OSIsoft PI Server 2017 PI Data Archive prior to 2017, where PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and cause the PI Network Manager to behave in an undefined manner. The vulnerability ...

CentOS 7 : NetworkManager / NetworkManager-libreswan / libnl3 / network-manager-applet (CESA-2017:2299)

An update for NetworkManager, NetworkManager-libreswan, libnl3, and network-manager-applet is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

Cisco Data Center Network Manager Denial of Service Vulnerability

Cisco Data Center Network Manager is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A security vulnerability exists in Cisco Data Center Network Manager version 5.21. An...

Code injection

Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...

CVE-2011-4650

Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...

CVE-2011-4650

Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.21. Known Fixed Releases: 6.00SL10.14...

CVE-2011-4650

CVE-2011-4650 affects Cisco Data Center Network Manager. The issue is caused by Excessive Logging During a TCP Flood on Java Ports, where an oversized server.log leads to increased CPU utilization. Affected release: 5.2(1). Fixed releases: 6.0(0)SL1(0.14) and 5.2(2.73)S0. Practical impact is incr...

Cisco Ultra Services Platform Information Disclosure Vulnerability

Cisco Ultra Services Platform is an intelligent online service delivery platform from the U.S. company Cisco Cisco. An information disclosure vulnerability exists in the Virtual Network Manager's VNFM logging function in Cisco Ultra Services Platform version 21.0.v0.65839, which stems from the...

CVE-2016-0764

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary...

CVE-2016-0764

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary...

DEBIAN-CVE-2016-0764

Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary...