Skip to content
OpenAdvisories

Archive

27 August 2020

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • High 8.6

    Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability

    A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attac…

  • High 7.5

    Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability

    A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due t…

  • High 7.8

    Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation Vulnerability

    A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to issue the enable command and get full administrative privileges. To …

  • High 8.6

    Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability

    A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) conditi…

  • High 8.6

    Cisco NX-OS Software Border Gateway Protocol Multicast VPN Session Denial of Service Vulnerability

    A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP session to repeatedly reset, causing a partial denial of service (DoS) condition du…

  • High 8.8

    Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability

    A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. The vuln…

  • High 7.2

    Cisco NX-OS Software Call Home Command Injection Vulnerability

    A vulnerability in the Call Home feature of Cisco NX-OS Software could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges on the underlying operating system (OS). The vulnerability is due to insuff…

  • High 8.8

    An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an at…

  • High 8.8

    An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an at…