CVEs

130,153 total · page 1949 of 2,604

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-1177	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1176	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1175	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1174	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1173	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1172	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1171	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1170	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1169	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1168	Cisco Systems, Inc. Rv110w	Hig	0.47	7.2	0.03	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1167	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.06	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1166	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1165	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1164	Cisco Systems, Inc. Rv110w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1163	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1162	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1161	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1160	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1159	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.03	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1150	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1149	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1148	Cisco Systems, Inc. Small Business RV110W, RV130, RV130W, and RV215W Routers	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1147	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1146	Cisco Systems, Inc. Rv215w	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1144	Cisco Systems, Inc. Connected Mobile Experiences (CMX)	Hig	0.57	8.8	0.01	Jan 13, 2021	A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing…
CVE-2021-1189	Cisco Systems, Inc. Small Business RV110W	Hig	0.47	7.2	0.02	Jan 13, 2021	Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2020-35578	Nagios XI	Hig	0.56	7.2	0.82	Jan 13, 2021	An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands.
CVE-2020-4596	IBM Security Guardium Insights	Hig	0.49	7.5	0.01	Jan 13, 2021	IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184812.
CVE-2020-4595	IBM Security Guardium Insights	Hig	0.49	7.5	0.01	Jan 13, 2021	IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819.
CVE-2020-4594	IBM Security Guardium Insights	Hig	0.49	7.5	0.01	Jan 13, 2021	IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184800.
CVE-2020-26262	Coturn Coturn	Hig	0.47	7.2	0.02	Jan 13, 2021	Coturn is free open source implementation of TURN and STUN Server. Coturn before version 4.5.2 by default does not allow peers to connect and relay packets to loopback addresses in the range of `127.x.x.x`. However, it was observed that when sending a `CONNECT` request with the…
CVE-2019-4702	IBM Security Guardium Data Encryption	Hig	0.53	8.1	0.00	Jan 13, 2021	IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CVE-2019-4160	IBM Security Guardium Data Encryption	Hig	0.49	7.5	0.01	Jan 13, 2021	IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577.
CVE-2021-3139	Open Iscsi tcmu-runner	Hig	0.53	8.1	0.03	Jan 13, 2021	In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can…
CVE-2021-3131	1C:Enterprise 1C:Enterprise 8	Hig	0.49	7.5	0.01	Jan 13, 2021	The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter.
CVE-2021-23900	Trustwave json-sanitizer	Hig	0.42	7.5	0.02	Jan 13, 2021	OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations.
CVE-2021-21605	Jenkins Project Jenkins	Hig	0.45	8.0	0.02	Jan 13, 2021	Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file.
CVE-2021-21604	Jenkins Project Jenkins	Hig	0.45	8.0	0.02	Jan 13, 2021	Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.
CVE-2021-20616	SKYSEA Client View	Hig	0.51	7.8	0.00	Jan 13, 2021	Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2020-5686	NEC UNIVERGE SV9500 series	Hig	0.49	7.5	0.01	Jan 13, 2021	Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific…
CVE-2020-35686	Sound Research DCHU model software component modules	Hig	0.51	7.8	0.00	Jan 13, 2021	The SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. (As a resolution, Windows Update is being submitted for all affected products to update to…
CVE-2020-28374	Linux Kernel	Hig	0.46	8.1	0.07	Jan 13, 2021	In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack…
CVE-2020-28386	Siemens Foundation Solid Edge	Hig	0.51	7.8	0.03	Jan 12, 2021	A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing DFT files. This could result in an out of bounds write past the end…
CVE-2020-28384	Siemens Foundation Solid Edge	Hig	0.51	7.8	0.03	Jan 12, 2021	A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to a stack based buffer overflow. An…
CVE-2020-28383	Siemens Foundation Solid Edge	Hig	0.51	7.8	0.04	Jan 12, 2021	A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of…
CVE-2020-28382	Siemens Foundation Solid Edge	Hig	0.51	7.8	0.03	Jan 12, 2021	A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end…
CVE-2020-28381	Siemens Foundation Solid Edge	Hig	0.51	7.8	0.03	Jan 12, 2021	A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write into…
CVE-2020-26996	Siemens Foundation Teamcenter Visualization	Hig	0.57	8.8	0.03	Jan 12, 2021	A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of CG4 files. This could result in a memory access past the end of an…
CVE-2020-26995	Siemens Foundation Teamcenter Visualization	Hig	0.57	8.8	0.04	Jan 12, 2021	A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the…
CVE-2020-26994	Siemens Foundation Teamcenter Visualization	Hig	0.57	8.8	0.02	Jan 12, 2021	A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker…

CVE-2021-1177HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1176HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1175HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1174HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1173HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1172HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1171HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1170HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1169HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1168HigJan 13, 2021
Cisco Systems, Inc.
Rv110w
risk 0.47cvss 7.2epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1167HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.06
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1166HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1165HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1164HigJan 13, 2021
Cisco Systems, Inc.
Rv110w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1163HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1162HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1161HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1160HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1159HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.03
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2021-1150HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1149HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1148HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W, RV130, RV130W, and RV215W Routers
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1147HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1146HigJan 13, 2021
Cisco Systems, Inc.
Rv215w
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to…
CVE-2021-1144HigJan 13, 2021
Cisco Systems, Inc.
Connected Mobile Experiences (CMX)
risk 0.57cvss 8.8epss 0.01
A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing…
CVE-2021-1189HigJan 13, 2021
Cisco Systems, Inc.
Small Business RV110W
risk 0.47cvss 7.2epss 0.02
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…
CVE-2020-35578HigJan 13, 2021
Nagios
XI
risk 0.56cvss 7.2epss 0.82
An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature is mishandled during a plugin upload, a remote, authenticated admin user can execute operating-system commands.
CVE-2020-4596HigJan 13, 2021
IBM
Security Guardium Insights
risk 0.49cvss 7.5epss 0.01
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184812.
CVE-2020-4595HigJan 13, 2021
IBM
Security Guardium Insights
risk 0.49cvss 7.5epss 0.01
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819.
CVE-2020-4594HigJan 13, 2021
IBM
Security Guardium Insights
risk 0.49cvss 7.5epss 0.01
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184800.
CVE-2020-26262HigJan 13, 2021
Coturn
Coturn
risk 0.47cvss 7.2epss 0.02
Coturn is free open source implementation of TURN and STUN Server. Coturn before version 4.5.2 by default does not allow peers to connect and relay packets to loopback addresses in the range of `127.x.x.x`. However, it was observed that when sending a `CONNECT` request with the…
CVE-2019-4702HigJan 13, 2021
IBM
Security Guardium Data Encryption
risk 0.53cvss 8.1epss 0.00
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
CVE-2019-4160HigJan 13, 2021
IBM
Security Guardium Data Encryption
risk 0.49cvss 7.5epss 0.01
IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 158577.
CVE-2021-3139HigJan 13, 2021
Open Iscsi
tcmu-runner
risk 0.53cvss 8.1epss 0.03
In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can…
CVE-2021-3131HigJan 13, 2021
1C:Enterprise
1C:Enterprise 8
risk 0.49cvss 7.5epss 0.01
The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter.
CVE-2021-23900HigJan 13, 2021
Trustwave
json-sanitizer
risk 0.42cvss 7.5epss 0.02
OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations.
CVE-2021-21605HigJan 13, 2021
Jenkins Project
Jenkins
risk 0.45cvss 8.0epss 0.02
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file.
CVE-2021-21604HigJan 13, 2021
Jenkins Project
Jenkins
risk 0.45cvss 8.0epss 0.02
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator.
CVE-2021-20616HigJan 13, 2021
SKYSEA
Client View
risk 0.51cvss 7.8epss 0.00
Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2020-5686HigJan 13, 2021
NEC
UNIVERGE SV9500 series
risk 0.49cvss 7.5epss 0.01
Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific…
CVE-2020-35686HigJan 13, 2021
Sound Research
DCHU model software component modules
risk 0.51cvss 7.8epss 0.00
The SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. (As a resolution, Windows Update is being submitted for all affected products to update to…
CVE-2020-28374HigJan 13, 2021
Linux
Kernel
risk 0.46cvss 8.1epss 0.07
In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack…
CVE-2020-28386HigJan 12, 2021
Siemens Foundation
Solid Edge
risk 0.51cvss 7.8epss 0.03
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing DFT files. This could result in an out of bounds write past the end…
CVE-2020-28384HigJan 12, 2021
Siemens Foundation
Solid Edge
risk 0.51cvss 7.8epss 0.03
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to a stack based buffer overflow. An…
CVE-2020-28383HigJan 12, 2021
Siemens Foundation
Solid Edge
risk 0.51cvss 7.8epss 0.04
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of…
CVE-2020-28382HigJan 12, 2021
Siemens Foundation
Solid Edge
risk 0.51cvss 7.8epss 0.03
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in a out of bounds write past the end…
CVE-2020-28381HigJan 12, 2021
Siemens Foundation
Solid Edge
risk 0.51cvss 7.8epss 0.03
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP12), Solid Edge SE2021 (All Versions < SE2021MP2). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write into…
CVE-2020-26996HigJan 12, 2021
Siemens Foundation
Teamcenter Visualization
risk 0.57cvss 8.8epss 0.03
A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of CG4 files. This could result in a memory access past the end of an…
CVE-2020-26995HigJan 12, 2021
Siemens Foundation
Teamcenter Visualization
risk 0.57cvss 8.8epss 0.04
A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the…
CVE-2020-26994HigJan 12, 2021
Siemens Foundation
Teamcenter Visualization
risk 0.57cvss 8.8epss 0.02
A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing of PCX files. This could result in a heap-based buffer overflow. An attacker…