‼ CVE-2023-30124 ‼
📖 Read
via "National Vulnerability Database".
LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20164 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20171 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20159 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20166 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20172 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20167 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20173 ‼
📖 Read
via "National Vulnerability Database".
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery (SSRF) attack through an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. For more information about these vulnerabilities, see the Details section of this advisory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20003 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error with the social login implementation. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the Guest Portal without authentication.📖 Read
via "National Vulnerability Database".
👍1
📢 Cisco reveals exploit code is publicly available for critical switch vulnerabilities 📢
📖 Read
via "ITPro".
Attackers could target UI vulnerabilities in Cisco switches to execute malicious code 📖 Read
via "ITPro".
ITPro
Cisco reveals exploit code is publicly available for critical switch vulnerabilities
Attackers could target UI vulnerabilities in Cisco switches to execute malicious code
‼ CVE-2022-45457 ‼
📖 Read
via "National Vulnerability Database".
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45453 ‼
📖 Read
via "National Vulnerability Database".
TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27423 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Ramon Fincken Auto Prune Posts plugin <=Â 1.8.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4418 ‼
📖 Read
via "National Vulnerability Database".
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40208.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23667 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in BeRocket Brands for WooCommerce plugin <=Â 3.7.0.6 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23999 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterInsights plugin <=Â 8.14.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47157 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <=Â 1.2.34 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45458 ‼
📖 Read
via "National Vulnerability Database".
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45459 ‼
📖 Read
via "National Vulnerability Database".
Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2782 ‼
📖 Read
via "National Vulnerability Database".
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.3.1-38.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45452 ‼
📖 Read
via "National Vulnerability Database".
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.📖 Read
via "National Vulnerability Database".