CVE-2022-20674: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector CSPC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient...

Cisco Secure Network Analytics Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated, remote attacker to execute arbitrary commands as an administrator on the underlying operating system. This vulnerability is due to...

PT-2022-2652

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the software, which could allow an unauthenticated,...

PT-2022-2861

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the software, which could allow an unauthenticated,...

PT-2022-2860

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2022-3758

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector CSPC Software...

PT-2022-4320

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remot...

PT-2022-4512

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue exists due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remot...

PT-2022-2703

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2022-2859

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2022-4255

Name of the Vulnerable Software and Affected Versions Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, affected versions not specified Description The issue is due to insufficient user input validation by the web-based management interface of the affected software. An...

Siemens SICAM P850 and SICAM P855 Devices Authentication Vulnerability (CNVD-2022-36392)

The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...

Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of...

CVE-2022-29879: Missing Authentication for Critical Function

A vulnerability has been identified in SICAM T All versions V3.0. The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information...

CVE-2022-29881: Missing Authentication for Critical Function

A vulnerability has been identified in SICAM T All versions V3.0. The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details...

CVE-2022-20799

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to...

CVE-2022-20801

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to...

CVE-2022-20753 Cisco Small Business RV Series Routers Remote Code Execution Vulnerability

A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit...

PT-2022-2504

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340 and RV345 Routers affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This...

CVE-2022-20753: Stack-based Buffer Overflow

A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit...