CVE-2021-44911

XpressEngine (XE) before 1.11.6 is vulnerable to unrestricted file upload via modules/menu/menu.admin.controller.php. The attack vector arises when using the Mouse over/Selected buttons, which do not enforce file suffix restrictions, allowing any file to be uploaded to the files directory. Upload...

Cisco IOS XE SD-WAN Software Multiple Products CLI Command Injection (cisco-sa-cli-cmdinj-4MttWZPB)

According to its self-reported version, Cisco IOS XE SD-WAN Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

The vulnerability of the AutoReconnect function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the AutoReconnect function in Cisco IOS XE and Cisco IOS systems is related to memory leaks. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE routers cBR-8 allows a attacker to cause a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE routers cBR-8 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the kernel of the Common Open Policy Service (COPS) in Cisco IOS XE operating systems, allowing a hacker to cause a service failure

The vulnerability of the Common Open Policy Service COPS for Cisco IOS XE operating systems is related to errors in processing COPS packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the command-line interface (CLI) of Cisco IOS XE SD-WAN software allows a attacker to execute arbitrary commands.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

The vulnerability in the implementation of the Unified Threat Defense function for Cisco IOS XE operating systems, the Snort intrusion detection system, the microprogramming-based network interface device Cisco Firepower Threat Defense, and the Cisco IOS XE SD-WAN software allows a threat actor to trigger a service failure.

The vulnerability of the Unified Threat Defense function in Cisco IOS XE operating systems, the Snort intrusion detection system, the microprogramming-based network interface device Cisco Firepower Threat Defense, and the Cisco IOS XE SD-WAN software is related to the exploitation of unlimited...

Cisco IOS XE Software IKEv2 AutoReconnect Feature DoS (cisco-sa-ikev2-ebFrwMPr)

According to its self-reported version, Cisco IOS-XE Software is affected by a denial of service DoS vulnerability in its AutoReconnect feature. An authenticated, remote attacker can exploit this issue to cause a DoS condition by exhausting the free IP addresses from the assigned local pool. Plea...

CVE-2021-0121

Improper access control in the installer for some IntelR IrisR Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0121

Improper access control in the installer for some IntelR IrisR Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0121

CVE-2021-0121 involves improper access control in the installer for Intel Iris Xe MAX Dedicated Graphics Drivers for Windows 10 prior to 27.20.100.9466, potentially allowing an authenticated local user to escalate privileges. Affected product: Intel Iris Xe MAX Graphics Drivers (Windows 10) with ...

PT-2021-12917 · Intel · Intel Iris Xe Max Dedicated Graphics Drivers

Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX Dedicated Graphics Drivers for Windows 10 versions prior to 27.20.100.9466 Description: The issue is related to improper access control in the installer for some IntelR IrisR Xe MAX Dedicated Graphics Drivers for Windows 1...

Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service DoS condition, or perform code execution on the affected device...

PT-2021-7229 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers affected versions not specified Description: A vulnerability in the Application Visibility and Control AVC-FNF feature could allow an unauthenticated, remote attacker t...

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR arises from insufficient input data validation. This allows attackers to trigger service interruptions.

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco SD-WAN Security Bug Allows Root Code Execution

Cisco SD-WAN implementations are vulnerable to a high-severity privilege-escalation vulnerability in the IOS IE operating system that could lead to arbitrary code execution. Cisco’s SD-WAN portfolio allows businesses of all sizes to connect disparate office locations via the cloud using various...

Cisco IOS XE Software SD WAN Command Injection (cisco-sa-sd-wan-rhpbE34A)

A command injection vulnerability exists in the CLI of Cisco IOS XE SD-WAN Software due to insufficient input validation by the system CLI. An authenticated, local attacker can exploit this, by submitting crafted input to the system CLI, to execute arbitrary commands with root privileges. Note th...

CVE-2021-1529

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating t...

Input validation

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating t...

CVE-2021-1529

Cisco IOS XE SD-WAN Software contains a CLI input-validation flaw that can let an authenticated, local attacker run arbitrary root commands. Vectors involve submitting crafted CLI input after authentication. Impact is arbitrary OS command execution with root privileges. Cisco has released updates...