CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2014-0674

Cisco Video Surveillance Operations Manager (VSOM) is affected by CVE-2014-0674 due to insufficient authentication controls on the bundled MySQL database. The vulnerability allows an unauthenticated remote attacker to access the MySQL database and potentially obtain sensitive information, modify ...

CVE-2013-3417

The CVE-2013-3417 issue affects Cisco Video Surveillance Operations Manager’s administrative web interface, where improper authentication allows unauthenticated remote access to video feeds via a crafted URL (Bug CSCtg72262). Affected component: the admin web UI; root cause: incomplete enforcemen...

CVE-2013-3376

Cisco CVE-2013-3376 is an open-redirect vulnerability in the help page of Cisco Video Surveillance Operations Manager. The root cause is insufficient validation of user-supplied input, allowing unauthenticated, remote attackers to craft a URL that redirects victims to arbitrary sites (phishing ri...