Cisco Finesse Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

Cisco Small Business 100, 300, and 500 Series Wireless Access Points Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

PT-2021-3076

Name of the Vulnerable Software and Affected Versions Cisco Finesse affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This issue is due to improper input...

PT-2021-3075

Name of the Vulnerable Software and Affected Versions Cisco Finesse affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote attacker to conduct a cross-site scriptin...

PT-2021-3074

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of arguments passed to a command in the web-based management interface of certain Cisc...

PT-2021-3069

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3084

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager affected versions not specified Description The issue is related to insufficient validation of user-supplied input to the web-based management interface, which could allow...

PT-2021-3077

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of arguments passed to a command in the web-based management interface of certain Cisc...

PT-2021-3082

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3073

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3071

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, 500 Series Wireless Access Points affected versions not specified Description The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3072

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3070

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

PT-2021-3063

Name of the Vulnerable Software and Affected Versions Cisco Small Business 100, 300, and 500 Series Wireless Access Points affected versions not specified Description The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticate...

MediaWiki suffers from an unspecified vulnerability (CNVD-2021-35233)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.35.2 and prior versions, which stems from incorrect...

ILIAS Information Disclosure Vulnerability

ILIAS is a powerful open source learning management system for developing and implementing web-based e-learning. An information disclosure vulnerability exists in ILIAS versions prior to 5.3.19, 5.4.12, and 6.0. An attacker can exploit this vulnerability to gain access to uploaded data paths via ...

CVE-2021-20997

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users...

Default credentials

In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users...

Code injection

In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management...

CVE-2021-20997

CVE-2021-20997 affects multiple WAGO managed switches. It enables reading password hashes of all Web-based Management users. NVD reports CVSSv3.1 base score 7.5 (NETWORK, LOW attack complexity, no privileges required) with HIGH confidentiality impact; CVSSv2 base score 5.0 (PARTIAL confidentialit...