Archive
1 November 2023
Vulnerabilities first published on this day (UTC), newest first.
144 results · Feed
-
Medium 5.3
A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote atta…
-
Medium 4.7
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected…
-
Medium 4.7
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected…
-
Medium 4.3
A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a…
-
Unscored —
This module enables you to view all paragraph entities in an admin view. The module contains an access bypass that allo…
-
Medium 5.8
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
-
Medium 5.0
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 6.1
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…
-
Medium 5.8
A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detecti…
-
High 8.6
A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower …
-
High 7.5
A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, re…
-
Medium 6.5
A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authent…
-
High 8.6
A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Def…
-
Medium 4.0
A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when…
-
High 8.8CVE-2023-5178 Public exploit
Kernel: use after free in nvmet_tcp_free_crypto in nvme
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, whic…
-
High 7.8
Insights-client: unsafe handling of temporary files and directories
A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the s…
-
Medium 4.5
SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability
The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to obtain sensitive information.
-
High 8.0
Directory Traversal Remote Code Execution Vulnerability
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.
-
High 8.0
Directory Traversal Remote Code Execution Vulnerability
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.
-
Medium 6.7
Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade …
-
High 8.8
Insecure Job Execution Mechanism Vulnerability
Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result.
-
High 8.0
Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability
SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.
-
High 7.5
Incorrect Implementation of Authentication Algorithm Vulnerability
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users to gain unauthorize…
-
Medium 6.5
Web Server Buffer Overflow Vulnerability
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to t…
-
Medium 5.3
Python-eventlet: patch regression for cve-2021-21419 in some red hat builds
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
-
Medium 6.7
In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. …
-
Unscored —
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no ad…
-
Unscored —
In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local de…
-
Unscored —
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Unscored —
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of s…
-
Unscored —
In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local den…
-
Unscored —
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial…
-
Unscored —
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of s…
-
Unscored —
In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of s…
-
Unscored —
In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial…
-
Unscored —
In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local deni…
-
Unscored —
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial…