Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

cisco integrated management controller vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2

CVE-2013-1182

The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) prior to 1.0(2h), 1.1 prior to 1.1(1j), and 1.3(x) allows remote malicious users to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.
Cisco Unified Computing System Infrastructure And Unified Computing System SoftwareCisco Unified Computing System Infrastructure And Unified Computing System Software 1.1Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1c)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1m)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1n)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1o)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1p)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1q)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1t)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1w)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.3(1y)Cisco Unified Computing System 6120xp Fabric Interconnect -Cisco Unified Computing System 6140xp Fabric Interconnect -Cisco Unified Computing System 6248up Fabric Interconnect -Cisco Unified Computing System 6296up Fabric Interconnect -Cisco Unified Computing System Integrated Management Controller -
5
CVSSv2

CVE-2021-1437

A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote malicious user to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer P...
Cisco Aironet Access Point Software -Cisco Catalyst 9800 FirmwareCisco Wireless Lan Controller Software
7.1
CVSSv2

CVE-2020-25683

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
4.3
CVSSv2

CVE-2020-25684

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2

CVE-2020-25685

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2

CVE-2020-25686

A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
7.1
CVSSv2

CVE-2020-25687

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
8.3
CVSSv2

CVE-2020-25681

A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buff...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
8.3
CVSSv2

CVE-2020-25682

A flaw was found in dnsmasq prior to 2.83. A buffer overflow vulnerability exists in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
9.3
CVSSv2

CVE-2021-44228

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6267XML injectionCVE-2024-37673CVE-2024-6266CVE-2024-30078arbitrary CVE-2024-36886CVE-2024-5346template injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook