Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jacob holcomb vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-5992
Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allow remote malicious users to hijack the authentication of administrators for requests that (1) add administrative accounts via screens/aaa/mgmtuser...
Cisco Wireless Lan Controller Software 7.2.110.0Cisco 2500 Wireless Lan Controller -Cisco 4100 Wireless Lan ControllerCisco 4400 Wireless Lan ControllerCisco 5500 Wireless Lan Controller -Cisco 2100 Wireless Lan ControllerCisco 7500 Wireless Lan Controller -Cisco 2000 Wireless Lan ControllerCisco 8500 Wireless Lan Controller -
NA
CVE-2013-1120
Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software prior to 8.0 allow remote malicious users to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910.
Cisco Unity Express Software 7.2Cisco Unity Express Software 7.0Cisco Unity Express Software 2.2Cisco Unity Express Software 2.0Cisco Unity Express Software 1.1.1Cisco Unity Express Software 3.2Cisco Unity Express Software 3.1Cisco Unity Express Software 3.0Cisco Unity Express Software 2.3Cisco Unity Express SoftwareCisco Unity Express Software 7.3Cisco Unity Express Software 7.1Cisco Unity Express Software 2.1Cisco Unity Express Software 1.1.2Cisco Unity Express
NA
CVE-2013-1114
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express prior to 8.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527.
Cisco Unity Express Software 2.0Cisco Unity Express Software 1.1.1Cisco Unity Express Software 2.1.1Cisco Unity Express Software 2.1.2Cisco Unity Express Software 7.2Cisco Unity Express Software 7.3Cisco Unity Express Software 7.0Cisco Unity Express Software 7.1Cisco Unity Express Software 3.1Cisco Unity Express Software 2.3Cisco Unity Express Software 2.1Cisco Unity Express Software 1.1.2Cisco Unity Express SoftwareCisco Unity Express Software 3.2Cisco Unity Express Software 3.0Cisco Unity Express Software 2.2.2Cisco Unity Express Software 2.2
9.8
CVSSv3
CVE-2013-4659
Buffer overflow in Broadcom ACSD allows remote malicious users to execute arbitrary code via a long string to TCP port 5916. This component is used on routers of multiple vendors including ASUS RT-AC66U and TRENDnet TEW-812DRU.
Asus Rt-ac66u Firmware -Trendnet Tew-812dru Firmware -
NA
CVE-2013-0126
Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote malicious users to hijack the authentication of administrators for requests that (1) add administrative accounts via the ...
Verizon Fios Actiontec Mi424wr-gen31 Router Firmware 40.19.36Verizon Fios Actiontec Mi424wr-gen31 Router -
NA
CVE-2013-6343
Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote malicious users to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_Installation.asp.
Asus Tm-ac1900 Firmware 3.0.0.4..374 979Asus Rt-n56u Firmware 3.0.0.4..374 979Asus Rt-ac66u Firmware 3.0.0.4..374 979
NA
CVE-2012-6007
Cross-site scripting (XSS) vulnerability in screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to inject arbitrary web script or HTML via the headline parameter, aka Bug ID CSCud65187, a diffe...
Cisco Wireless Lan Controller Software 7.2.110.0Cisco 2000 Wireless Lan ControllerCisco 2100 Wireless Lan ControllerCisco 2500 Wireless Lan Controller -Cisco 4400 Wireless Lan ControllerCisco 7500 Wireless Lan Controller -Cisco 8500 Wireless Lan Controller -Cisco 4100 Wireless Lan ControllerCisco 5500 Wireless Lan Controller -
NA
CVE-2012-0286
Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork prior to 6.0.8.0 allows remote malicious users to hijack the authentication of unspecified victims for requests that modify user accounts.
Stone-ware WebnetworkStone-ware Webnetwork 6.0.5.0
NA
CVE-2012-4051
Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Suite prior to 8.61 allow remote malicious users to hijack the authentication of administrators for requests that (1) create user accounts or ...
Jamf Casper SuiteJamf Casper Suite 8.5Jamf Casper Suite 8.51Jamf Casper Suite 8.43Jamf Casper Suite 8.2Jamf Casper Suite 8.0Jamf Casper Suite 7.3Jamf Casper Suite 7.2Jamf Casper Suite 7.1Jamf Casper Suite 8.4Jamf Casper Suite 8.3Jamf Casper Suite 8.1Jamf Casper Suite 7.0
NA
CVE-2012-5991
screens/base/web_auth_custom.html on Cisco Wireless LAN Controller (WLC) devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service (device reload) via a certain buttonClicked value in an internal webauth_type request, aka Bug ID CSCud50209.
Cisco Wireless Lan Controller Software 7.2.110.0Cisco 4100 Wireless Lan ControllerCisco 4400 Wireless Lan ControllerCisco 5500 Wireless Lan Controller -Cisco 7500 Wireless Lan Controller -Cisco 2100 Wireless Lan ControllerCisco 2000 Wireless Lan ControllerCisco 2500 Wireless Lan Controller -Cisco 8500 Wireless Lan Controller -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook