PT-2020-3766 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco DNA Center software. These vulnerabilities could allow an unauthenticated,...

Cisco Webex Meetings Cross-Site Scripting Vulnerability

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. A cross-site scripting vulnerability exists in the web management interface in Cisco Webex Meetings versions prior to T40.6.0, which stems from the program failing to adequately validate user-submitted input. The...

Cisco UCS Director Cross-Site Scripting Vulnerability

Cisco UCS Director is a heterogeneous platform for private cloud Infrastructure as a Service IaaS from Cisco. A cross-site scripting vulnerability exists in the web management interface in Cisco UCS Director versions prior to 6.7.4.1, which stems from the program failing to properly validate inpu...

PT-2020-4229 · Cisco · Cisco Unified Communications Manager Im & Presence Service +3

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager affected versions not specified Cisco Unified Communications Manager Session Management Edition affected versions not specified Cisco Unified Communications Manager IM & Presence Service affected versions...

Cisco SD-WAN vManage Software License Issue Vulnerability (CNVD-2020-44061)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the web management interface in Cisco SD-WAN vManage Software. A remote attacker could exploit this vulnerability with a...

ASUS Home Router Bugs Open Consumers to Snooping Attacks

A pair of flaws in ASUS routers for the home could allow an attacker to compromise the devices – and eavesdrop on all of the traffic and data that flows through them. The bugs are specifically found in the RT-AC1900P whole-home Wi-Fi model, within the router’s firmware update functionality...

Cisco SD-WAN vManage Software Path Traversal Vulnerability (CNVD-2020-42258)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A path traversal vulnerability exists in the web management interface in Cisco SD-WAN vManage Software, which stems from the program failing to properly validate uploaded...

HPESBNW04018 rev.2 - HPE Aruba Clearpass Manager, Information Disclosure in Web Management Interface for Aruba Intelligent Edge Switches

Potential Security Impact: Remote: Unauthorized Information Disclosure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 2540 Switch Series 16.08. before 16.08.0009 16.09. before 16.09.0007 16.10. before 16.10.0003 Aruba 2530 Switch Series 16.08. before 16.08.0009 16.09. befor...

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall web management interface and the Cisco RV215W Wireless-N VPN Router software allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco RV110W Wireless-N VPN Firewall and the Cisco RV215W Wireless-N VPN Router’s web management interface exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-41233)

The Cisco RV110W Wireless-N VPN Firewall is an enterprise-class router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of multiple Cisco products, which can be exploited by a remote attacker to execute arbitrary code on the system with the help of a maliciou...

CVE-2020-3381

A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal attacks and obtain read and write access to sensitive files on a targeted system. The vulnerability is due to a lack of proper validation o...

CVE-2020-3140

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3140

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

Input validation

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3140 Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3140 Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

Cisco Prime License Manager Privilege Escalation Vulnerability

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

CVE-2020-3340

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to...

PT-2020-3143 · Cisco · Cisco Unified Communications Manager Session Management Edition +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME affected versions not specified Description: The issue is related to insufficient validation of user-supplied...

Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.1.13 OS Command Injection

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.1.13. It is, therefore, affected by an OS Command Injection vulnerability in the PAN-OS web management interface. A remote, authenticated attacker can exploit this issue, to execute...