CVE-2019-20488

The CVE-2019-20488 entry affects NETGEAR WNR1000V4 devices (firmware 1.1.0.54). The web management interface (setup.cgi) is vulnerable to command injection via shell metacharacters in the sysDNSHost parameter, enabling remote execution of arbitrary commands. The current sources confirm the vulner...

Cisco Data Center Network Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-10707)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A cross-site request forgery CSRF vulnerability exists in the Web management...

PT-2020-1882 · Cisco · Cisco Dna Center

Name of the Vulnerable Software and Affected Versions: Cisco DNA Center Software versions prior to 1.3.0.6 Cisco DNA Center Software versions prior to 1.3.1.4 Description: The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affect...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2020-03755)

Cisco Unified Communications Manager is the centerpiece of the Cisco Collaboration Platform, enabling a person to easily communicate with others via voice, video, and messaging from any device, on any operating system. An information disclosure vulnerability exists in the web-based management...

CVE-2014-2650

The CVE concerns Unify OpenStage / OpenScape Desk Phone IP (pre-V3 R3.11.0) where the web-based management interface is vulnerable to OS command injection. Root cause is improper handling of input in the management UI, enabling an attacker to execute arbitrary commands on the device. CVSS data in...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2020-03722)

Cisco Finesse is a next-generation agent and supervisor desktop designed to enhance the customer service experience in contact centers. A cross-site scripting vulnerability exists in the Web management interface in Cisco Finesse that stems from the software's failure to clean up incoming requests...

Cisco Data Center Network Manager Authentication Bypass Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An authentication bypass vulnerability exists in the Web management interface of...

CVE-2013-3085

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...

CVE-2013-3085

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...

CVE-2013-3085

CVE-2013-3085 concerns Belkin F5D8236-4 v2 where an authentication bypass exists in the device’s web management interface. The CVSS-based metrics indicate a high to critical impact: CVSS 2.0 base score 7.5 (Network attack, no authentication, partial confidentiality/integrity/availability impact) ...

CVE-2019-15956

A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2020-31993)

The Cisco Web Security Appliance WSA is a web security appliance from Cisco USA. The appliance provides SaaS-based access control, real-time web reporting and tracking, and development of security policies. A cross-site scripting vulnerability exists in the Web management interface in versions...

Arbitrary Command Execution Vulnerability in Multiple Cisco Products

Cisco RV016 Multi-WAN VPN Router and so on are a VPN virtual private network router from Cisco. An arbitrary command execution vulnerability exists in the Web management interface of several Cisco products, which stems from the program's failure to validate the input of HTTP payloads, and can be...

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to cause a service failure.

The vulnerability of the web interface for managing Microprogramming-based IP phones from the Cisco SPA100 series is related to errors during the verification of user requests sent to the web management interface. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability (CNVD-2019-39612)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco Identity Services Engine Information Disclosure Vulnerability

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and streamline their service operations. An information disclosure vulnerability exists in the web-based managemen...

CVE-2019-15245

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15247

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15240

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...