Lucene search
+L

2003 matches found

OSV
OSV
added 2021/10/06 8:15 p.m.5 views

CVE-2021-34742

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS6AI score0.0075EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/06 8:15 p.m.37 views

CVE-2021-34742

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS0.0075EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/06 8:15 p.m.22 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

4.3CVSS5.9AI score0.0075EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/06 7:46 p.m.10 views

CVE-2021-34742 Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS6.1AI score0.0075EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/06 7:46 p.m.55 views

CVE-2021-34742

Cisco Vision Dynamic Signage Director is affected by a reflected XSS in its web-based management interface due to insufficient validation of user-supplied input. An unauthenticated, remote attacker can lure a user to click a crafted link, potentially executing arbitrary script code in the interfa...

6.1CVSS5.9AI score0.0075EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/06 7:46 p.m.36 views

CVE-2021-34742 Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS6.1AI score0.0075EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/06 6:15 p.m.20 views

CVE-2021-25467

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

7.2CVSS0.00108EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/06 6:15 p.m.2 views

CVE-2021-25467

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

6.7CVSS6.1AI score0.00108EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/06 6:15 p.m.14 views

Buffer overflow

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

7.2CVSS7AI score0.00108EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/06 5:7 p.m.25 views

CVE-2021-25467

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

5.3CVSS7.2AI score0.00108EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/06 5:7 p.m.42 views

CVE-2021-25467

CVE-2021-25467 describes a potential buffer overflow in the Vision DSP kernel driver (Samsung devices) before SMR Oct-2021 Release 1, enabling privilege escalation to root via hijacking a loaded library. The incident is tied to local exploit scenarios, with impact described as high for confidenti...

7.2CVSS6.9AI score0.00108EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/06 4:0 p.m.2 views

CVE-2021-34742

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS6.7AI score0.0075EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/10/06 4:0 p.m.52 views

Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation o...

6.1CVSS6AI score0.0075EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/06 12:0 a.m.7 views

Cisco Vision Dynamic Signage Director 跨站脚本漏洞

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco. Cisco Vision Dynamic Signage Director suffers from a cross-site scripting vulnerability that stems from This vulnerability is due to insufficient validation of user-supplied input by the web-based...

6.1CVSS6.5AI score0.0075EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/05 12:0 a.m.6 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS Vision is a security vulnerability in some Huawei Smart Screens. An attacker could exploit the vulnerability to cause a WLAN denial of service...

7.5CVSS7.4AI score0.00675EPSS
SaveExploits0References5
OSV
OSV
added 2021/09/27 5:15 p.m.7 views

CVE-2021-36134

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

6.5CVSS6.7AI score0.00543EPSS
SaveExploits1References1
NVD
NVD
added 2021/09/27 5:15 p.m.22 views

CVE-2021-36134

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

7.4CVSS0.00543EPSS
SaveExploits1References1
Prion
Prion
added 2021/09/27 5:15 p.m.16 views

Cross site scripting

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

3.3CVSS6.7AI score0.00543EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/09/27 4:15 p.m.28 views

CVE-2021-36134 Out of bounds write in Netop Vision Pro

Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service DoS...

7.4CVSS7.8AI score0.00543EPSS
SaveExploits1References1
CVE
CVE
added 2021/09/27 4:15 p.m.43 views

CVE-2021-36134

Netop Vision Pro

7.4CVSS6.9AI score0.00543EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder