121 matches found
Cisco IOS and Cisco IOS XE Software Cross-Site Request Forgery Vulnerability
Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A cross-site request forgery vulnerability exists in the Web UI in Cisco IOS and Cisco IOS XE Software versions prior to 16.1.1, which stems from a program that does not adequately protect the Web...
The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability in the web interface for managing Microprogramming-based IP phones of the Cisco SPA100 Series is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges using a...
The vulnerability in the web interface of Cisco HyperFlex’s hyper-converged infrastructure allows a attacker to perform arbitrary actions on a vulnerable device using a specially crafted link.
The vulnerability of the web interface for managing Cisco HyperFlex infrastructure is related to errors in authenticating the requests being executed. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable device using a specially crafted link...
PT-2019-3070 · Cisco · Cisco Integrated Management Controller
Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to injec...
PT-2019-3234 · Cisco · Cisco Ucs Director Express For Big Data +2
Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC Supervisor versions affected versions not specified Cisco UCS Director versions affected versions not specified Cisco UCS Director Express for Big Data versions affected versions not specified...
CVE-2017-8230
On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrativ...
The vulnerability in the web interface for managing Cisco Video Surveillance Manager allows a perpetrator to disclose protected information.
The vulnerability in the web interface for managing Cisco Video Surveillance Manager exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information by sending specially crafted requests...
The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a malicious actor to execute arbitrary SQL queries.
The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager software relates to input validation errors. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries by sending specially...
TP-LINK TL-WR840N v5 XSS Injection Vulnerability
The TP-Link TL-WR840N is a wireless router from China P&L TP-Link. A cross-site scripting vulnerability exists in TP-LINK TL-WR840N v5 00000005 using firmware version 0.9.1 3.16 v0001.0 Build 171211 Rel.58800n. The vulnerability stems from the lack of proper validation of client data by the WEB...
The vulnerability in the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to cause a service failure.
The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability in the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to write arbitrary files into the device’s file system.
The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to deficiencies in path name checking for access-controlled directories. Exploiting this vulnerability allows a malicious actor to write arbitrary file...
VulnCheck KEV: CVE-2019-1663
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The...
The vulnerability in the web interface of the operating system PAN-OS allows a hacker to inject any desired JavaScript or HTML code into the web page that is being uploaded.
The vulnerability of the PAN-OS operating system’s web interface exists due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the loaded web page from a remote location...
The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the website structure. This allows attackers to inject arbitrary code into the uploaded web pages or disclose protected information.
The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web page or disclose protected...
The vulnerability of microprogramming software in Cisco RV110W Wireless-N VPN web interfaces and Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN multifunctional routers allows attackers to disclose protected information.
The vulnerability of microprogrammed software in Cisco RV110W Wireless-N VPN web management interfaces and Cisco RV130W Wireless-N and Cisco RV215W Wireless-N VPN multifunctional routers stems from insufficient testing of character sequences used in catalog traversal in the web management...
The vulnerability of the ManageEngine Desktop Central web interface for managing workstations, related to insufficient validation of input data, allows a perpetrator to gain control over the connected workstations.
The vulnerability of the desktop management tool through the web interface of ManageEngine Desktop Central is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain control over all connected desktops...
Cisco Identity Services Engine Guest Portal Cross-Site Scripting Vulnerability
Cisco Identity Services Engine is an access control solution that integrates authentication, authorization and AAA, status, setup files, and client management. A cross-site scripting vulnerability exists in the Cisco Identity Services Engine WEB interface implementation, which allows remote...
CVE-2017-8050
Tenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the unauthorized manipulation of the admin password...
Novell NetIQ Privileged User Manager 2.3.1 auth.dll Code Execution
Novell NetIQ Privileged User Manager version 2.3.1 suffers from a remote code execution vulnerability in pamodifyaccounts in auth.dll. The secure web interface contains a flaw which allows, without prior authentication, to change the password of the user 'admin'. A remote attacker then could logi...
