Skip to content
OpenAdvisories

Archive

20 January 2021

Vulnerabilities first published on this day (UTC), newest first.

17 results · Clear filters · Feed

  • Critical 9.8

    Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

    Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Detail…

  • Critical 9.8

    Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

    Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Detail…

  • Critical 9.8

    Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

    Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Detail…

  • Critical 9.8

    Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

    Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Detail…

  • Critical 9.8

    Cisco Smart Software Manager Satellite Web UI Command Injection Vulnerabilities

    Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Detail…

  • Critical 9.6

    Cisco DNA Center Command Runner Command Injection Vulnerability

    A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit…

  • Critical 9.8

    Cisco SD-WAN Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

  • Critical 9.8

    Cisco SD-WAN Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

  • Critical 9.8

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The suppo…

  • Critical 9.1

    Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Suppor…

  • Critical 9.1

    Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Suppor…

  • Critical 9.8

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported version…

  • Critical 9.8

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The suppo…

  • Critical 9.8

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). Supported…

  • Critical 9.8

    Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions…

  • Critical 9.8
    CVE-2021-1994 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…

  • Critical 9.8
    CVE-2020-14756 Public exploit EPSS 75%

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versi…