CVE-2021-1463: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface do...

CVE-2021-1409: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1473: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details...

CVE-2021-1408: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1472: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details...

PT-2021-2570

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected devices. These...

PT-2021-2572

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

PT-2021-2571

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center affected versions not specified Cisco Unified Contact Center Express affected versions not specified Description: The issue is related to the web-based management interface of the affected software, where...

PT-2021-2574

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

PT-2021-2569

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected devices. These...

PT-2021-2568

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: The issue is related to the web-based management interface of the affected devices, where multiple vulnerabilities could allow an...

PT-2021-2573

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

PT-2021-2575

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

CVE-2021-1374 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against another user of the web-based management interface of an...

CVE-2021-1374

CVE-2021-1374 describes a stored cross-site scripting (XSS) vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family. The issue arises from insufficient validation of user-supplied input in the management UI. An attacker who aut...

PT-2021-2492

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct a...

CVE-2021-1374: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against another user of the web-based management interface of an...

CVE-2021-1287: Stack-based Buffer Overflow

A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly. The...

PT-2021-2425

Name of the Vulnerable Software and Affected Versions: Cisco RV132W ADSL2+ Wireless-N VPN Routers affected versions not specified Cisco RV134W VDSL2 Wireless-AC VPN Routers affected versions not specified Description: A vulnerability in the web-based management interface of the affected devices...

CVE-2021-26971

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A...