EUVD-2021-6687

Malicious code in bioql PyPI...

CVE-2021-1356: Improper Input Validation

Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service DoS condition. These vulnerabilities are due...

Cisco IOS XE Software Web UI Remote Access Privilege Escalation (cisco-sa-20180328-xepriv)

According to its self-reported version, Cisco IOS XE Software is affected by a privilege escalation vulnerability in the web-based user interface web UI. This vulnerability exists because the affected software does not reset the privilege level for each web UI session. An authenticated, remote...

Authorization

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability exists because the affected software does not reset the privilege level for each web UI session. An...

CVE-2018-0152

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability exists because the affected software does not reset the privilege level for each web UI session. An...

PT-2018-1191

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions prior to the fixed version Description The issue is related to the web-based user interface of Cisco IOS XE Software, where a vulnerability exists due to the software not resetting the privilege level for each we...

CVE-2018-0152: Insufficient Session Expiration

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability exists because the affected software does not reset the privilege level for each web UI session. An...

CVE-2016-6438: Undefined Security Weakness

A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS...

PT-2016-6912

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 15.53S2.9 through 15.62SP Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 3.16S through 3.18.1S Description A vulnerability in...

Cisco IOS Software SSH Version 2 RSA-Based User Authentication Bypass Vulnerability (cisco-sa-20150923-sshpk)

A vulnerability in the SSH version 2 SSHv2 protocol implementation of Cisco IOS Software could allow an unauthenticated, remote attacker to bypass user authentication. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Cisco IOS and IOS XE Software SSH Version 2 RSA-Based User Authentication Bypass Vulnerability

A vulnerability in the SSH version 2 SSHv2 protocol implementation of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to bypass user authentication. Successful exploitation could allow the attacker to log in with the privileges of the user or the privileges configure...

PT-2013-6217

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 03.02.xxSE through 03.03.xxSE Description The issue arises from the VTY authentication implementation in Cisco IOS XE, which incorrectly relies on the Linux-IOS internal-network configuration. This allows remote attackers...