PT-2023-3315 · Cisco · Cisco Small Business Rv320 +1

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers affected versions not specified Description: The web-based management interface of the affected devices has insufficient validation of user-supplied input, allowing an...

Cisco Small Business 跨站脚本漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325, which stems from insufficient validation of inputs to the web-based management interface...

PT-2023-2156 · Cisco · Cisco Small Business Rv082 +5

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers affected versions not specified Description: The issue exists due to insufficient input validation by the web-based management interface, allowing an unauthenticated,...

PT-2023-2152 · Cisco · Cisco Small Business Rv016 +5

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 affected versions not specified Description: The issue exists due to insufficient protection of the web page structure and insufficient input validation by the web-based...

PT-2023-2172 · Cisco · Cisco Prime Infrastructure +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface,...

PT-2023-2211 · Cisco · Cisco Prime Infrastructure +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface,...

PT-2023-2153 · Cisco · Cisco Small Business Rv082 +5

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers affected versions not specified Description: The issue is due to insufficient input validation by the web-based management interface, allowing an unauthenticated, remo...

CVE-2023-20132 Cisco Webex Meetings Web UI Vulnerabilities

Multiple vulnerabilities in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack or upload arbitrary files as recordings. For more information about these vulnerabilities, see the Details section of this adviso...

Cisco Small Business 跨站脚本漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325, which stems from insufficient validation of inputs to the web-based management interface...

CVE-2023-20151 Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. These vulnerabilities are due t...

The vulnerability in the web interface for managing microprogramming software used in IPTV and VoD services, NetUP IPTV Combine, allows attackers to bypass security restrictions and gain increased privileges.

The vulnerability in the web-based administration interface of microprogramming software for IPTV and VoD services, NetUP IPTV Combine, is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increase...

A vulnerability in the web interface for operating systems ArubaOS, allowing a hacker to read arbitrary files

The vulnerability in the web interface for operating systems ArubaOS relates to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

The vulnerability in the web interface for operating systems ArubaOS allows a hacker to execute cross-site scripting attacks.

The vulnerability in the web interface for operating systems ArubaOS is related to insufficient protection of the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager allows a perpetrator to disclose protected information and enhance their privileges.

The vulnerability of the web interface of the Aruba Networks ClearPass Policy Manager relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information and enhance their privileges...

Vulnerability of the web interface of Cisco IOS XE operating systems, allowing attackers to disclose sensitive information

The vulnerability in the web interface of Cisco IOS XE exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Cisco DNA Center’s web interface allows a hacker to increase their privileges.

The vulnerability of the Cisco DNA Center’s web interface is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability in the web interface of the Cisco SD-WAN vManage centralized system management interface allows a attacker to perform a CSRF attack.

The vulnerability in the web interface of the Cisco SD-WAN vManage centralized system management interface is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager allows a malicious actor to create arbitrary users on the platform and increase their privileges.

The vulnerability of the web-based interface of the Aruba Networks ClearPass Policy Manager is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to create arbitrary users on the platform and increase their privileges...

A vulnerability in the web interface for operating systems ArubaOS, which allows a hacker to delete any files they desire.

The vulnerability in the web interface for operating systems ArubaOS is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to delete any files remotely...