cisco prime infrastructure 3.2 base vulnerabilities and exploits

(subscribe to this query)

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1185 Github repositories28 Articles

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with...

198 Github repositories9 Articles

A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execu...

Cisco Evolved Programmable Network Manager 1.2.1.3 Cisco Evolved Programmable Network Manager 1.2.500 Cisco Evolved Programmable Network Manager 2.0.0 Cisco Prime Infrastructure 1.4.2 Cisco Prime Infrastructure 3.1(4.0)Cisco Prime Infrastructure 2.2 Cisco Prime Infrastructure 3.2 Base Cisco Evolved Programmable Network Manager 2.0(4.0.45d)Cisco Prime Infrastructure 1.2.1 Cisco Prime Infrastructure 3.2(0.0)Cisco Prime Infrastructure 3.1.1 Cisco Prime Infrastructure 2.2(3)Cisco Prime Infrastructure 2.1.0 Cisco Evolved Programmable Network Manager 1.2.0 Cisco Prime Infrastructure 1.3.0.20 Cisco Evolved Programmable Network Manager 1.2.300 Cisco Evolved Programmable Network Manager 1.2.200 Cisco Prime Infrastructure 3.1(5.0)Cisco Evolved Programmable Network Manager 1.2.400 Cisco Prime Infrastructure 1.2.0.103 Cisco Prime Infrastructure 2.2(2)Cisco Prime Infrastructure 3.1(0.128)

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and previous versions.

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...

1 Github repository1 Article

Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...

35 Github repositories4 Articles

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...

75 Github repositories5 Articles

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...

5 Github repositories1 Article

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook