HPESBNW04018 rev.2 - HPE Aruba Clearpass Manager, Information Disclosure in Web Management Interface for Aruba Intelligent Edge Switches

Potential Security Impact: Remote: Unauthorized Information Disclosure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 2540 Switch Series 16.08. before 16.08.0009 16.09. before 16.09.0007 16.10. before 16.10.0003 Aruba 2530 Switch Series 16.08. before 16.08.0009 16.09. befor...

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall web management interface and the Cisco RV215W Wireless-N VPN Router software allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco RV110W Wireless-N VPN Firewall and the Cisco RV215W Wireless-N VPN Router’s web management interface exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-41233)

The Cisco RV110W Wireless-N VPN Firewall is an enterprise-class router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of multiple Cisco products, which can be exploited by a remote attacker to execute arbitrary code on the system with the help of a maliciou...

CVE-2020-3381

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation o...

CVE-2020-3140

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3140

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

Input validation

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3140 Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3140 Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3340

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to...

PT-2020-3143 · Cisco · Cisco Unified Communications Manager Session Management Edition +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME affected versions not specified Description: The issue is related to insufficient validation of user-supplied...

Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.1.13 OS Command Injection

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.1.13. It is, therefore, affected by an OS Command Injection vulnerability in the PAN-OS web management interface. A remote, authenticated attacker can exploit this issue, to execute...

Cisco Data Center Network Manager Multiple Stored Cross-Site Scripting Vulnerablities (June 2020)

A stored cross-site scripting XSS vulnerabilities exists in web-based management interface of Cisco Data Center Network Manager DCNM due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker, administrative credentials can exploit this, by...

CVE-2020-3360

A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management interface of an affected...

CVE-2020-3268

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35161)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which originates from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-35165)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program that fails to properly restrict user input boundaries and can be exploited by a remote attacker with...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-34324)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program that fails to properly restrict user input boundaries and can be exploited by a remote attacker with...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35163)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which stems from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker to...