inject vulnerabilities and exploits

(subscribe to this query)

4

CVSSv2

ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege and inject rogue values into znc.conf....

Znc Znc Debian Debian Linux 9.0

9

CVSSv2

A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due to insufficient input validation of data parameters for...

Cisco Sd-wan Firmware

6.5

CVSSv2

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by manipulating (for example) the domain parameter of the samba URL....

Cantata Project Cantata

7.5

CVSSv2

A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) without authenticating to the controller or SDNInterfaceapp. SDNInterface has been deprecated in OpenDayLight since it was last used in the final...

Opendaylight Sdninterfaceapp

4.3

CVSSv2

A vulnerability in the API Framework of Cisco AsyncOS for Cisco Web Security Appliance (WSA) and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to inject crafted HTTP headers in the web server's response. The vulnerability...

Cisco Content Security Management Appliance Cisco Web Security Appliance 11.8.0-382 Cisco Web Security Appliance 12.0.1-268

6.5

CVSSv2

A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is due...

Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vmanage Network Management -Cisco Vsmart Controller -Cisco Vedge-100 Firmware Cisco Vedge 100b Firmware Cisco Vedge 100m Firmware Cisco Vedge 100wm Firmware Cisco Vedge-1000 Firmware Cisco Vedge-2000 Firmware Cisco Vedge-5000 Firmware

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....

Elasticsearch Elasticsearch

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....

Dojotoolkit Dojo

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML....

Redhat Ovirt-engine -1 Github repository available

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook