privilege escalation vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin....

Cyberark Endpoint Privilege Manager -

NA

Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or (2) stack trace, aka Bug ID CSCtc46050....

Cisco Digital Media Manager 5.0 Cisco Digital Media Manager 5.0.1 Cisco Digital Media Manager 5.0.2 Cisco Digital Media Manager 5.0.3 Cisco Digital Media Manager

NA

Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378....

Cisco Digital Media Manager 5.0 Cisco Digital Media Manager 5.0.1 Cisco Digital Media Manager 5.0.2 Cisco Digital Media Manager 5.0.3 Cisco Digital Media Manager 5.1

NA

Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008....

Cisco Digital Media Manager 5.0 Cisco Digital Media Manager 5.0.1 Cisco Digital Media Manager 5.0.2 Cisco Digital Media Manager 5.0.3 Cisco Digital Media Manager 5.1

NA

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to...

Cisco Wireless Lan Solution Engine 2.0 Cisco Wireless Lan Solution Engine 2.1 Cisco Wireless Lan Solution Engine 2.2 Cisco Wireless Lan Solution Engine 2.3 Cisco Wireless Lan Solution Engine 2.4 Cisco Wireless Lan Solution Engine 2.5 Cisco Wireless Lan Solution Engine 2.6 Cisco Wireless Lan Solution Engine 2.7 Cisco Wireless Lan Solution Engine 2.8 Cisco Wireless Lan Solution Engine 2.9 Cisco Wireless Lan Solution Engine 2.10 Cisco Wireless Lan Solution Engine 2.11 Cisco Wireless Lan Solution Engine 2.12 Cisco Wireless Lan Solution Engine 2.131 EDB exploit available

NA

Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400....

Cisco Nx-os 6.1 Cisco Nx-os 6.1\\(1\\)Cisco Nx-os 6.1\\(2\\)Cisco Nx-os 6.1\\(3\\)Cisco Nx-os 6.1\\(4\\)Cisco Nx-os 6.1\\(4a\\)Cisco Nexus 7000 -Cisco Nexus 7000 10-slot -Cisco Nexus 7000 18-slot -Cisco Nexus 7000 9-slot -

NA

Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629....

Cisco Nx-os 5.0\\(3\\)n1\\(1\\)Cisco Nx-os 5.0\\(3\\)n1\\(1a\\)Cisco Nx-os 5.0\\(3\\)n1\\(1b\\)Cisco Nx-os 5.0\\(3\\)n1\\(1c\\)Cisco Nx-os 5.0\\(3\\)n2\\(1\\)Cisco Nx-os 5.0\\(3\\)n2\\(2\\)Cisco Nx-os 5.0\\(3\\)n2\\(2a\\)Cisco Nx-os 5.0\\(3\\)n2\\(2b\\)Cisco Nx-os 5.0\\(3\\)u1\\(1a\\)Cisco Nx-os 5.0\\(3\\)u1\\(1b\\)Cisco Nx-os 5.0\\(3\\)u1\\(1d\\)Cisco Nx-os 5.0\\(3\\)u1\\(2\\)Cisco Nx-os 5.0\\(3\\)u1\\(2a\\)Cisco Nx-os 5.0\\(3\\)u2\\(1\\)Cisco Nx-os 5.0\\(3\\)u2\\(2\\)Cisco Nx-os 5.0\\(3\\)u2\\(2a\\)Cisco Nx-os 5.0\\(3\\)u2\\(2b\\)Cisco Nx-os 5.0\\(3\\)u2\\(2c\\)Cisco Nx-os 5.0\\(3\\)u2\\(2d\\)Cisco Nx-os 5.0\\(3\\)u3\\(1\\)Cisco Nx-os 5.0\\(3\\)u3\\(2\\)Cisco Nx-os 5.0\\(3\\)u3\\(2a\\)Cisco Nx-os 5.0\\(3\\)u3\\(2b\\)Cisco Nx-os 5.0\\(3\\)u4\\(1\\)Cisco Nx-os 5.0\\(3\\)u5\\(1\\)Cisco Nx-os 5.0\\(3\\)u5\\(1a\\)Cisco Nx-os 5.0\\(3\\)u5\\(1b\\)Cisco Nx-os 5.0\\(3\\)u5\\(1c\\)Cisco Nx-os 5.0\\(3\\)u5\\(1d\\)Cisco Nx-os 5.0\\(3\\)u5\\(1e\\)

NA

The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a large volume of crafted traffic, aka Bug ID...

Cisco Nx-os 6.0\\(1\\)Cisco Nexus 7000 -Cisco Nexus 7000 10-slot -Cisco Nexus 7000 18-slot -Cisco Nexus 7000 9-slot -Cisco Nx-os 6.2\\(1\\)Cisco Nx-os 6.2\\(1n\\)Cisco Nx-os 6.2\\(3\\)Cisco Nx-os 6.2\\(3n\\)Cisco Nx-os 6.2\\(5\\)Cisco Nx-os Cisco Mds 9000 Cisco Mds 9100 -

NA

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on Nexus 3000 devices, NX-OS 4.1 before 4.1(2)E1(1l) on Nexus 4000 devices, NX-OS 5.x before...

Cisco Unified Computing System 6120xp Fabric Interconnect -Cisco Unified Computing System 6140xp Fabric Interconnect -Cisco Unified Computing System 6248up Fabric Interconnect -Cisco Unified Computing System 6296up Fabric Interconnect -Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.4\\(1j\\)Cisco Cg-os Cg4 Cisco Cg-os Cg4\\(1\\)Cisco Cgr 1120 -Cisco Cgr 1240 -Cisco Nx-os 5.2 Cisco Nx-os 5.2\\(1\\)Cisco Nx-os 5.2\\(3\\)Cisco Nexus 7000 -Cisco Nexus 7000 10-slot -Cisco Nexus 7000 18-slot -Cisco Nexus 7000 9-slot -Cisco Nx-os -Cisco Nx-os 5.0 Cisco Nx-os 5.0\\(2\\)Cisco Nx-os 5.0\\(2\\)n1\\(1\\)Cisco Nx-os 5.0\\(2\\)n2\\(1\\)Cisco Nx-os 5.0\\(2\\)n2\\(1a\\)Cisco Nx-os 5.0\\(2a\\)Cisco Nx-os 5.0\\(3\\)Cisco Nx-os 5.0\\(3\\)n1\\(1\\)Cisco Nx-os 5.0\\(3\\)n1\\(1a\\)Cisco Nx-os 5.0\\(3\\)n1\\(1b\\)Cisco Nx-os 5.0\\(3\\)n1\\(1c\\)Cisco Nx-os 5.0\\(3\\)n2\\(1\\)Cisco Nx-os 5.0\\(3\\)n2\\(2\\)Cisco Nx-os 5.0\\(3\\)n2\\(2a\\)Cisco Nx-os 5.0\\(3\\)n2\\(2b\\)Cisco Nx-os 5.0\\(3\\)u1\\(1a\\)Cisco Nx-os 5.0\\(3\\)u1\\(1b\\)Cisco Nx-os 5.0\\(3\\)u1\\(1d\\)Cisco Nx-os 5.0\\(3\\)u1\\(2\\)Cisco Nx-os 5.0\\(3\\)u1\\(2a\\)Cisco Nx-os 5.0\\(3\\)u2\\(1\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.4\\(1j\\)Cisco Nexus 3016q -Cisco Nexus 3048 -Cisco Nexus 3064t -Cisco Nexus 3064x -Cisco Nexus 3548 -Cisco Nx-os 5.0\\(3\\)u2\\(2\\)Cisco Nx-os 5.0\\(3\\)u2\\(2a\\)Cisco Nx-os 5.0\\(3\\)u2\\(2b\\)Cisco Nx-os 5.0\\(3\\)u2\\(2c\\)Cisco Nx-os 5.0\\(3\\)u2\\(2d\\)Cisco Nx-os 5.0\\(3\\)u3\\(1\\)Cisco Nx-os 5.0\\(3\\)u3\\(2\\)Cisco Nx-os 5.0\\(3\\)u3\\(2a\\)Cisco Nx-os 5.0\\(3\\)u3\\(2b\\)Cisco Nx-os 5.0\\(3\\)u4\\(1\\)Cisco Nx-os 5.0\\(3\\)u5\\(1\\)Cisco Nx-os 5.0\\(3\\)u5\\(1a\\)Cisco Nx-os 5.0\\(3\\)u5\\(1b\\)Cisco Nx-os 5.0\\(3\\)u5\\(1c\\)Cisco Nx-os 5.0\\(3\\)u5\\(1d\\)Cisco Nx-os 5.0\\(3\\)u5\\(1e\\)Cisco Nx-os 5.0\\(5\\)Cisco Nx-os 5.1 Cisco Nx-os 5.1\\(1\\)Cisco Nx-os 5.1\\(1a\\)Cisco Nx-os 5.1\\(2\\)Cisco Nx-os 5.1\\(3\\)Cisco Nexus 5000 -Cisco Nexus 5010 -Cisco Nexus 5010p Switch -Cisco Nexus 5020 -Cisco Nexus 5020p Switch -Cisco Nexus 5548p -Cisco Nexus 5548up -Cisco Nexus 5596up -Cisco Nx-os 4.1.\\(2\\)Cisco Nexus 4001i -

NA

The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP...

Cisco Adaptive Security Appliance Software 8.2 Cisco Adaptive Security Appliance Software 8.4 Cisco Adaptive Security Appliance Software 9.0 Cisco Adaptive Security Appliance Software 9.11 Nmap script available

1 2 3 4 5 NEXT »