CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2013-3431

CVE-2013-3431 affects Cisco Video Surveillance Manager (VSM) prior to 7.0.0, where VSMC monitoring pages can be accessed without authentication, enabling remote attackers to obtain sensitive configuration, archives, and logs via unspecified vectors. This vulnerability is part of the trio document...

CVE-2018-15427

The CVE-2018-15427 issue affects Cisco Video Surveillance Manager (VSM) Appliance on Cisco UCS platforms. A root account with undocumented, default static credentials permits unauthenticated remote login, enabling an attacker to log in and execute arbitrary commands with root privileges. Public d...

CVE-2013-3429

Cisco Video Surveillance Manager (VSM) prior to 7.0.0 contains multiple vulnerabilities (CVE-2013-3429, CVE-2013-3430, CVE-2013-3431) including a directory traversal flaw in monitor/logselect.php/read_log.jsp and a vulnerability allowing access to sensitive data without authentication. This could...

CVE-2019-1717

Cisco CVE-2019-1717 affects the Cisco Video Surveillance Manager web-based management interface. The root cause is improper validation of parameters in the web interface, enabling an unauthenticated, remote attacker to download arbitrary files from the affected device (information disclosure). Th...

CVE-2013-3430

CVE-2013-3430 affects Cisco Video Surveillance Manager (VSM) before 7.0.0. The issue allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT component. Cisco’s advisory notes multiple vulnerabilities in VSM pre-7....