Lucene search
+L

4089 matches found

NVD
NVD
added 2020/10/08 5:15 a.m.44 views

CVE-2020-3536

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

6.4CVSS0.00626EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/08 5:15 a.m.21 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

3.5CVSS5.3AI score0.00626EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/08 4:20 a.m.32 views

CVE-2020-3536 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

6.4CVSS5.3AI score0.00626EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/08 4:20 a.m.100 views

CVE-2020-3536

Cisco SD-WAN vManage Web UI is affected by a cross-site scripting (XSS) vulnerability due to improper validation of user input in a specific data field. An authenticated, remote attacker could inject malicious data to execute script code in the user's browser context. Cisco has released software ...

6.4CVSS5.5AI score0.00626EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/10/08 4:20 a.m.9 views

CVE-2020-3536 Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

6.4CVSS6.1AI score0.00626EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/10/07 4:00 p.m.52 views

Cisco SD-WAN vManage Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability exists because the web-based management interface does not properly...

6.4CVSS5.4AI score0.00626EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:00 a.m.15 views

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform lies in the lack of security measures for the SQL query structure. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

10CVSS7.8AI score0.01119EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/09/25 12:00 a.m.49 views

Citrix SD-WAN WANOP Multiple Vulnerabilities (CTX281474)

The remote Citrix SD-WAN WANOP device is version 10.2.x prior to 10.2.7b, 11.0.x prior to 11.0.3f, 11.1.x prior to 11.1.2a, 11.2.x prior to 11.2.1a. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability originating from the management network. CVE-2020-82...

8.8CVSS7.5AI score0.01555EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2020/09/25 12:00 a.m.56 views

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11 Recent assessments: wvu-r7 at August 26, 2021 2:01am UTC reported: Please see theAtredis writeup for root cause analysis. CVE-2020-25223 has high attacker value and...

10CVSS9.8AI score0.96693EPSS
SaveIn wildExploits9References6
NVD
NVD
added 2020/09/24 6:15 p.m.18 views

CVE-2020-3509

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

8.6CVSS0.01415EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/24 6:15 p.m.7 views

CVE-2020-3509

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

8.6CVSS7.3AI score0.01415EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/24 6:15 p.m.18 views

Race condition

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

7.8CVSS8.4AI score0.01415EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/24 5:51 p.m.33 views

CVE-2020-3509 Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

8.6CVSS8.5AI score0.01415EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/24 4:00 p.m.58 views

Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

8.6CVSS8.6AI score0.01415EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/23 4:15 p.m.9 views

CVE-2020-5782

In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wantype’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent on this connection...

6.5CVSS6.6AI score0.00987EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/09/23 3:33 p.m.33 views

CVE-2020-5782

In IgniteNet HeliOS GLinq v2.2.1 r2961, if a user logs in and sets the ‘wantype’ parameter, the wan interface for the device will become unreachable, which results in a denial of service condition for devices dependent on this connection...

6.5AI score0.00987EPSS
SaveExploits1References1
OSV
OSV
added 2020/09/18 9:15 p.m.6 views

CVE-2020-8247

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix...

8.8CVSS7.3AI score0.01353EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/18 9:15 p.m.8 views

CVE-2020-8246

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix...

7.5CVSS7.1AI score0.01555EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/18 9:15 p.m.27 views

Code injection

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix...

5CVSS7.5AI score0.01555EPSS
SaveExploits0References1Affected Software4
ATTACKERKB
ATTACKERKB
added 2020/09/18 9:15 p.m.5 views

CVE-2020-8246

Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix ADC and NetScaler Gateway 11.1 before 11.1-65.12, Citrix SD-WAN WANOP 11.2 before 11.2.1a, Citrix...

7.5CVSS7.3AI score0.01555EPSS
SaveExploits0References2
Rows per page
Query Builder