The vulnerability in the web interface for managing applications used to manage Cisco Unified Contact Center Management Portal (Unified CCMP) and Cisco Unified Contact Center Domain Manager (Unified CCDM allows a malicious actor to escalate their privileges.

The vulnerability of the Web interface for managing software solutions in the Cisco Unified Contact Center Management Portal and Cisco Unified Contact Center Domain Manager is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for creating reports for Cisco Security Manager’s deployed security solutions is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the specially...

The vulnerability in the web interface of the Cisco Secure Network Analytics system, previously known as Cisco Stealthwatch Enterprise, allows attackers to execute cross-site scripting attacks.

The vulnerability of the web interface of the Cisco Secure Network Analytics system, previously known as Cisco Stealthwatch Enterprise, is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

Cisco Security Manager 跨站脚本漏洞

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco, which is mainly used to configure firewall, VPN and intrusion protection security services on Cisco networks and security devices.A cross-site scripting vulnerability exists in Cisco Security Manager, whic...

TP-Link TL-WR802N V4(JP) vulnerable to OS command injection

Overview TP-Link TL-WR802N is a wifi router for home networks. The firmware version 170705 is reported vulnerable to OS command injection CWE-78. Impact Any user who can login to the web interface of the affected product may execute any OS commands. Solution Update the Firmware Update to the late...

The vulnerability of the web interface and API of the Cisco Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco Application Policy Infrastructure Controller’s web interface and API exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

The vulnerability of the Cisco Vision Dynamic Signage Director web interface arises from the lack of protective measures taken for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Cisco Vision Dynamic Signage Director digital content management web interface exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the web interface and API of the Cisco Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco Application Policy Infrastructure Controller’s web interface and API exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

Gryphon Tower Command Injection Vulnerability (CNVD-2021-100342)

The Gryphon Tower is a wireless router from Gryphon. The Gryphon Tower suffers from a command injection vulnerability that originates from unauthenticated command injections in multiple parameters in the web interface of /cgi-bin/luci/rc, which can be exploited by an attacker to send a crafted...

The vulnerability in the web interface of the server software for Cisco Prime Access Registrar allows a attacker to execute arbitrary code or gain access to protected information via a browser.

The vulnerability of the server software’s web interface for ensuring scalability and extensibility in Cisco Prime Access Registrar is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or...

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTPS request from a remo...

yamaha 部分产品 信息泄露漏洞

Yamaha NVR500 and others are products of Yamaha Corporation, Japan.Yamaha NVR500 is an Enterprise Router.Yamaha RTX810 is a Gigabit VPN Virtual Private Network Router.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a Firewall product.Yamaha FWX120 is a...

The vulnerability in the software web interface of F-Secure Internet Gatekeeper allows a hacker to trigger a service failure.

The vulnerability of the F-Secure Internet Gatekeeper software’s web interface relates to the use of the assert function or similar operators when processing user name parameters. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a specially crafted HT...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network administration allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Cisco Firepower Management Center FMC software network interface relates to incorrect checking of input parameters for HTTP requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Intersight Virtual Appliance software for managing cloud systems is related to insufficient cleaning of input data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2021-34731

A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently...

The vulnerability of the web-based network interface of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD web-based network interface services is caused by a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The software’s vulnerability involves providing a web interface for accessing GNU Mailman v3 archives and interacting with Hyperkitty lists. This vulnerability allows an attacker to gain access to confidential data.

The vulnerability of the software that provides a web interface for accessing GNU Mailman v3 archives and interacting with Hyperkitty lists is related to an error during the import of private distribution list archives, which later became publicly accessible. Exploiting this vulnerability could...