CVE-2013-3085

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...

CVE-2013-3085

CVE-2013-3085 concerns Belkin F5D8236-4 v2 where an authentication bypass exists in the device’s web management interface. The CVSS-based metrics indicate a high to critical impact: CVSS 2.0 base score 7.5 (Network attack, no authentication, partial confidentiality/integrity/availability impact) ...

CVE-2013-3085

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...

PT-2019-6906

Name of the Vulnerable Software and Affected Versions Belkin F5D8236-4 version v2 Description An authentication bypass issue exists in the web management interface. Recommendations For Belkin F5D8236-4 version v2, consider restricting access to the web management interface until a fix is availabl...

CVE-2013-3085: Improper Authentication

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...

CVE-2019-15956

A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to perform an unauthorized system reset on an affected device. The vulnerability is due to improper authorization controls for a specific UR...

Cisco Web Security Appliance Cross-Site Scripting Vulnerability (CNVD-2020-31993)

The Cisco Web Security Appliance WSA is a web security appliance from Cisco USA. The appliance provides SaaS-based access control, real-time web reporting and tracking, and development of security policies. A cross-site scripting vulnerability exists in the Web management interface in versions...

Arbitrary Command Execution Vulnerability in Multiple Cisco Products

Cisco RV016 Multi-WAN VPN Router and so on are a VPN virtual private network router from Cisco. An arbitrary command execution vulnerability exists in the Web management interface of several Cisco products, which stems from the program's failure to validate the input of HTTP payloads, and can be...

PT-2019-3963

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions affected versions not specified Description A vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an authenticated, remote attacker to...

The vulnerability in the web interface for managing microprogrammed software in Cisco SPA100 Series IP phones allows a perpetrator to cause a service failure.

The vulnerability of the web interface for managing Microprogramming-based IP phones from the Cisco SPA100 series is related to errors during the verification of user requests sent to the web management interface. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco SPA100 Series Analog Telephone Adapters Remote Code Execution Vulnerability (CNVD-2019-39612)

The Cisco SPA100 Series Analog Telephone Adapters ATAs are an SPA100 series analog telephone adapter. A remote code execution vulnerability exists in the Cisco SPA100 Series Analog Telephone Adapters that stems from not properly validating user input submitted to the web-based management interfac...

Cisco Identity Services Engine Information Disclosure Vulnerability

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security, and streamline their service operations. An information disclosure vulnerability exists in the web-based managemen...

CVE-2019-15240

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15247

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15245

Multiple vulnerabilities in Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, adjacent attacker to execute arbitrary code with elevated privileges. The vulnerabilities are due to improper validation of user-supplied input to the web-based management interface. An...

CVE-2019-15258 Cisco SPA100 Series Analog Telephone Adapters Web Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters ATAs could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper validation of user-supplied requests to the...

PT-2019-3819

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface, which could allow an authenticated, remote attacker to conduct cross-site...

PT-2019-3592

Name of the Vulnerable Software and Affected Versions Cisco Small Business Switches versions affected versions not specified Description The issue is related to a lack of protection against cross-site request forgery CSRF attacks in the web-based management interface. This could allow a remote...

The vulnerability in the web-management interface of the Fortinet FortiNAC device allows a perpetrator to execute a cross-site scripting attack.

The vulnerability in the Fortinet FortiNAC network access control web interface relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...