1031 matches found
CVE-2020-3135
A vulnerability in the web-based management interface of Cisco Unified Communications Manager UCM could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based...
GE Reason S20 Ethernet Switch Cross-Site Scripting Vulnerability
The GE Reason S20 Ethernet Switch is a General Electric switch from General Electric GE. A cross-site scripting vulnerability exists in the Reason S20 managed Ethernet switches, which stems from a lack of proper validation of client data by a WEB application. An attacker can exploit this...
CVE-2020-15789
A vulnerability has been identified in Polarion Subversion Webclient All versions. The web interface could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who...
CVE-2020-3546
A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to insufficient validation of requests that are se...
CVE-2019-11858
Multiple buffer overflow vulnerabilities exist in the AceManager Web API of ALEOS before 4.13.0, 4.9.5, and 4.4.9...
The vulnerability in the web interface (wwsympa.fcgi) of the Sympa mailing list manager allows a perpetrator to escalate their privileges.
The vulnerability in the web interface wwsympa.fcgi of the Sympa mailing list manager is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges through specially...
The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to execute cross-site scripting attacks.
The vulnerability in the web interface of the Cisco Identity Services Engine management platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a perpetrator to execute arbitrary commands.
The vulnerability of the web-based management interfaces for Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 is related to the lack of measures for input data cleansing. Exploiting this vulnerability...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a perpetrator to execute arbitrary commands.
The vulnerability of the web-based management interfaces for Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 is related to the lack of measures for cleaning input data. Exploiting this vulnerability...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a attacker to cause service failures or execute arbitrary code with root privileges.
The vulnerability in the web-based administration interface of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 arises from an operation that goes beyond the buffer limits in memory. Exploiting this...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a attacker to cause service failures or execute arbitrary code with root privileges.
The vulnerability in the web-based administration interface of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 arises from an operation that goes beyond the buffer limits in memory. Exploiting this...
Cisco Data Center Network Manager Cross-Site Scripting Vulnerability (CNVD-2020-34292)
Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the Web management interface in Cis...
CVE-2020-3233
A vulnerability in the web-based Local Manager interface of the Cisco IOx Application Framework could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web-based Local Manager interface of an affected device. The attacker must have...
The vulnerability of the web interface of the Cisco Hosted Collaboration Mediation Fulfillment software allows a perpetrator to disclose protected information.
The vulnerability of the Cisco Hosted Collaboration Mediation Fulfillment software’s web interface is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through specially crafted malicious...
CVE-2020-3251
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section o...
The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to trigger a service failure.
The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to trigger a service failure.
The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches lies in the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability in the web interface of Moxa OnCell G3100-HSPA series cellular IP switches allows a hacker to execute arbitrary code.
The vulnerability of the web interface of Moxa OnCell G3100-HSPA series cellular IP switches is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the web interface of Moxa OnCell G3470A-LTE industrial LTE IP modems is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow a malicious actor to trigger service failures or execute arbitrary codes remotely...
The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the Cisco Identity Services Engine’s web interface relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...