Lucene search
+L
CiscoMost viewed

5295 matches found

Cisco
Cisco
•added 2012/05/11 1:48 p.m.•42 views

Cisco Unified MeetingPlace Directory Enumeration Information Disclosure Vulnerability

Cisco Unified MeetingPlace software contains a vulnerability that could allow an unauthenticated, remote attacker to access sensitive information on a targeted system. The vulnerability is due to an unspecified error in the affected software that could allow an attacker to enumerate existing...

5CVSS6.2AI score0.0116EPSS
SaveExploits0References1
Cisco
Cisco
•added 2012/01/18 4:00 p.m.•42 views

Cisco Digital Media Manager Privilege Escalation Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

9CVSS6.2AI score0.03163EPSS
SaveExploits0References1
Cisco
Cisco
•added 2011/10/05 4:00 p.m.•42 views

Multiple Vulnerabilities in Cisco Firewall Services Module

The Cisco Firewall Services Module FWSM for the Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers is affected by the following vulnerabilities: Syslog Message Memory Corruption Denial of Service Vulnerability Authentication Proxy Denial of Service Vulnerability TACACS+...

7.8CVSS6.3AI score
SaveExploits0References1
Cisco
Cisco
•added 2011/02/23 4:00 p.m.•42 views

Multiple Vulnerabilities in Cisco TelePresence Manager

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

10CVSS5.9AI score0.05458EPSS
SaveExploits0References1
Cisco
Cisco
•added 2010/08/25 4:00 p.m.•42 views

Cisco Unified Communications Manager Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS6.1AI score
SaveExploits0References1
Cisco
Cisco
•added 2009/04/08 4:00 p.m.•42 views

Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS5.9AI score
SaveExploits0References1
Cisco
Cisco
•added 2008/06/25 4:00 p.m.•43 views

Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS5.9AI score
SaveExploits0References1
Cisco
Cisco
•added 2008/05/21 4:00 p.m.•42 views

Cisco Service Control Engine Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS6AI score
SaveExploits0References1
Cisco
Cisco
•added 2007/05/02 4:00 p.m.•42 views

LDAP and VPN Vulnerabilities in PIX and ASA Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

6AI score
SaveExploits0References1
Cisco
Cisco
•added 2006/09/20 4:00 p.m.•42 views

Cisco Guard Enables Cross Site Scripting

A vulnerability in the Cisco Guard may enable an attacker to send a web browser client to a malicious website with the use of Cross Site Scripting XSS when the Guard is providing anti-spoofing services between the web browser client and a webserver. The attacker may exploit this by providing a...

2.6CVSS5.7AI score0.01992EPSS
SaveExploits0References1
Cisco
Cisco
•added 2006/09/13 8:09 p.m.•42 views

Cisco IOS VTP Integer Wrap Denial of Service Vulnerability

Cisco IOS and Cisco Catalyst OS contain an integer overflow vulnerability that could allow an authenticated, remote attacker to cause affected devices to stop processing configuration changes, possibly resulting in a denial of service DoS condition. This vulnerability exists due to an integer...

7.8CVSS7AI score0.05047EPSS
SaveExploits0References1
Cisco
Cisco
•added 2004/06/30 4:00 p.m.•42 views

Cisco Collaboration Server Vulnerability

...

10CVSS2.1AI score0.02974EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2026/05/20 4:00 p.m.•41 views

Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insufficient validation of user-supplied input. An...

4.7CVSS6.2AI score0.00438EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/04/01 4:00 p.m.•41 views

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host. This vulnerability is due to the unintentional exposure of an internal service. An...

9.8CVSS6.2AI score0.00914EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•41 views

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software OSPF Protocol Vulnerabilities

Multiple vulnerabilities in the OSPF feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. For mor...

6.8CVSS5.9AI score0.00251EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•41 views

Cisco Secure Firewall Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability

A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...

6.8CVSS6AI score0.00377EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/09/03 4:00 p.m.•41 views

Cisco Webex Meetings URL Redirection Vulnerability

A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no customer action is needed. This vulnerability exist...

4.3CVSS7.1AI score0.00235EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/08/27 4:00 p.m.•41 views

Cisco UCS Manager Software Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the...

5.4CVSS5.9AI score0.00234EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/04/22 9:45 p.m.•41 views

Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang/OTP SSH Server: April 2025

On April 16, 2025, a critical vulnerability in the Erlang/OTP SSH server was disclosed. This vulnerability could allow an unauthenticated, remote attacker to perform remote code execution RCE on an affected device. The vulnerability is due to a flaw in the handling of SSH messages during the...

10CVSS9.9AI score0.98786EPSS
SaveExploits38References1
Cisco
Cisco
•added 2025/04/02 4:00 p.m.•41 views

Cisco Enterprise Chat and Email Denial of Service Vulnerability

A vulnerability in chat messaging features of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper validation of user-supplied input to chat entry points. An attacker could exploit thi...

7.5CVSS7.3AI score0.00642EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/03/12 4:00 p.m.•41 views

Cisco IOS XR Software Access Control List Bypass Vulnerability

A vulnerability in the access control list ACL processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are received on an ingress...

5.8CVSS5.6AI score0.00399EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/10/23 4:00 p.m.•41 views

Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an...

6.1CVSS6.2AI score0.00398EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/05/22 4:00 p.m.•41 views

Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability

A vulnerability in the activation of an access control list ACL on Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device. Thi...

5.8CVSS6.7AI score0.00395EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/03/27 4:00 p.m.•41 views

Cisco Access Point Software Secure Boot Bypass Vulnerability

A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...

5.9CVSS5.7AI score0.00249EPSS
SaveExploits0References1
Cisco
Cisco
•added 2023/11/01 4:00 p.m.•41 views

Cisco Firepower Threat Defense Software SSL and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability

A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a logic error that occurs whe...

4CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Cisco
Cisco
•added 2023/08/16 4:00 p.m.•41 views

Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability

A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to cause a web cache poisoning attack on an affected device. This vulnerability is due to improper input validation of HTTP requests. An attacker could...

5.3CVSS5.3AI score0.0055EPSS
SaveExploits0References1
Cisco
Cisco
•added 2023/04/05 4:00 p.m.•41 views

Cisco Identity Services Engine Command Injection Vulnerabilities

Multiple vulnerabilities in specific Cisco Identity Services Engine ISE CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid...

6CVSS6.6AI score
SaveExploits0References1
Cisco
Cisco
•added 2023/01/18 4:00 p.m.•42 views

Identifying and Mitigating Security Exposures When Using No Payload Encryption Images with Existing Cryptographic Configuration

Cisco IOS Software and Cisco IOS XE Software images come in two types: The regular universalk9 image and the No Payload Encryption NPE universalk9npe image. NPE images were introduced to satisfy import requirements in some countries that require that the platform does not support strong payload...

7AI score
SaveExploits0References1
Cisco
Cisco
•added 2022/05/04 4:00 p.m.•41 views

ClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: May 2022

On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus ClamAV versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authenticated, local attacker to cause a denial of...

6.5CVSS6.2AI score0.00397EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/04/20 4:00 p.m.•41 views

Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability

A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance VA could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing ...

7.5CVSS7.9AI score0.01182EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/04/13 4:00 p.m.•41 views

Cisco SD-WAN vManage Software Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected system as a low-privileged user to exploit this...

7.3CVSS7.5AI score0.00602EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/03/02 4:00 p.m.•41 views

Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

7.8CVSS7.6AI score0.00263EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•41 views

Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability

A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the...

6CVSS7.1AI score0.00342EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•41 views

Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability

A vulnerability in Cisco Aironet Access Point AP Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the AP. An attacker could exploit this vulnerability by sending...

6.8CVSS7.7AI score0.01404EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/08/19 4:00 p.m.•41 views

Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to missing checks when t...

8.8CVSS8.9AI score
SaveExploits0References1
Cisco
Cisco
•added 2020/07/29 4:00 p.m.•41 views

Cisco Data Center Network Manager Command Injection Vulnerability

A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system with the privileges of the logged-in user. The vulnerability is due to insufficient validation of...

8.2CVSS2.1AI score0.0079EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/07/01 4:00 p.m.•41 views

Cisco Small Business RV042 and RV042G Routers Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and Cisco Small Business RV042G Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based...

6.1CVSS2.3AI score0.00444EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/02/26 4:00 p.m.•41 views

Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability

A vulnerability in the local management local-mgmt CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to insufficient input...

7.8CVSS7.8AI score0.00484EPSS
SaveExploits0References1
Cisco
Cisco
•added 2019/05/15 4:00 p.m.•41 views

Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1779)

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient validation of arguments...

4.2CVSS3AI score0.00522EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/11/29 4:00 p.m.•41 views

Cisco WebEx Meeting Center Cross-Site Scripting Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

6.1CVSS6.1AI score0.0122EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/07/19 4:00 p.m.•41 views

Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. The vulnerability exists because the affected...

5.3CVSS7.7AI score0.01833EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/05/17 4:00 p.m.•41 views

Cisco Remote Expert Manager Denial of Service Vulnerability

A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service DoS condition on an affected system. The vulnerability is due to a lack of rate-limiting...

5.3CVSS7.7AI score0.02394EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/04/19 4:00 p.m.•41 views

Cisco Prime Network Registrar DNS Denial of Service Vulnerability

A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, which could lead to a partial denial of service DoS condition on the affected system. The vulnerability is due to...

5.8CVSS5.7AI score0.01986EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/03/15 4:00 p.m.•41 views

Cisco UCS Director Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation ...

5.8CVSS6AI score0.01228EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/01/18 4:00 p.m.•41 views

Cisco WebEx Meeting Center Site Redirection Vulnerability

A vulnerability in a URL parameter of Cisco WebEx could allow an unauthenticated, remote attacker to perform site redirection. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including a remote site URL in the affected parameter of the...

5CVSS5.5AI score0.01021EPSS
SaveExploits2References1
Cisco
Cisco
•added 2016/12/21 4:00 p.m.•41 views

Cisco CloudCenter Orchestrator Docker Engine Privilege Escalation Vulnerability

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. The vulnerability is due to a misconfiguration that causes the Docker...

9.3CVSS9.7AI score0.02927EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/12/07 4:00 p.m.•41 views

Cisco IOS and IOS XE Software SSH X.509 Authentication Bypass Vulnerability

A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to improper validation of X.509 signatures during...

5.8CVSS7.4AI score0.01411EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/10/26 4:00 p.m.•41 views

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System IPICS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of some parameters passed to the web...

4.3CVSS6.1AI score0.00833EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/10/26 12:00 p.m.•41 views

Cisco Identity Services Engine SQL Injection Vulnerability

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. The vulnerability is due to insufficient controls on Structured Query Language SQL statements. An attacker could exploit...

4.9CVSS7.6AI score0.01102EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/09/14 4:00 p.m.•41 views

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

A vulnerability in the Cisco Fog Director for IOx could allow an authenticated, remote attacker to write a file to arbitrary locations. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file via the Cartridge interface. ...

6.3CVSS6.5AI score0.01171EPSS
SaveExploits0References1
Total number of security vulnerabilities5000