Cisco Data Center Network Manager Multiple Stored Cross-Site Scripting Vulnerablities (June 2020)

A stored cross-site scripting XSS vulnerabilities exists in web-based management interface of Cisco Data Center Network Manager DCNM due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker, administrative credentials can exploit this, by...

CVE-2020-3360

A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management interface of an affected...

CVE-2020-3268

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35166)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which originates from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-34324)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program that fails to properly restrict user input boundaries and can be exploited by a remote attacker with...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35163)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which stems from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker to...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-34325)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program that fails to properly restrict user input boundaries and can be exploited by a remote attacker with...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35161)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which originates from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-35165)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program that fails to properly restrict user input boundaries and can be exploited by a remote attacker with...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-36258)

Cisco Small Business RV016 Multi-WAN VPN, etc. are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program's failure to properly restrict user input boundaries, and can be exploited by a remote...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35159)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which originates from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-35167)

Cisco RV110W and others are a VPN firewall router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from the program's failure to properly restrict user input boundaries and can be exploited by a remote attacker with a...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-36260)

Cisco Small Business RV016 Multi-WAN VPN, etc. are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program's failure to properly restrict user input boundaries, and can be exploited by a remote...

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2021-22180)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An operating system command injection vulnerability exists in the web management interface in Palo Alto Networks PAN-OS version 8.0 all versions, version 7.1 prior to 7.1.26, and version...

CVE-2020-2029

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

Command injection

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

CVE-2020-2029

CVE-2020-2029 is an OS command injection vulnerability in PAN-OS web management interface. Authenticated administrators can execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for PAN-OS configuration. Affected are PAN-OS 8.0 (all version...

Unauthorized Access Vulnerability in ZLAN Serial Server

Shanghai Zoran Information Technology Co., Ltd. is a high-tech enterprise providing industrial IoT solutions. An unauthorized access vulnerability exists in the ZLAN serial port server, which can be exploited by an attacker to gain unauthorized access to the WEB management interface...

AsyncOS Input Validation Error Vulnerability in Multiple Cisco Products

Cisco Content Security Management Appliance SMA and so on are the products of the American Cisco Cisco company.Cisco Content Security Management Appliance is a set of content security management equipment. The appliance is mainly used to manage all the policies, reports, audit information, etc. o...

CVE-2019-20488

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web management interface setup.cgi are vulnerable to command injection, allowing remote attackers to execute arbitrary commands, as demonstrated by shell metacharacters in the sysDNSHost parameter...