VYPR

CVEs

411,058 total · page 5215 of 8,222

  • CVE-2021-21006HigJan 13, 2021
    risk 0.56cvss 8.6epss 0.06

    Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. Successful exploitation could lead to arbitrary code execution. Exploitation of this issue requires user interaction in that a victim must…

  • CVE-2020-9209MedJan 13, 2021
    risk 0.44cvss 6.7epss 0.00

    There is a privilege escalation vulnerability in SMC2.0 product. Some files in a directory of a module are located improperly. It does not apply the directory limitation. Attackers can exploit this vulnerability by crafting malicious file to launch privilege escalation. This can…

  • CVE-2020-1866MedJan 13, 2021
    risk 0.42cvss 6.5epss 0.00

    There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions…

  • CVE-2020-1865MedJan 13, 2021
    risk 0.42cvss 6.5epss 0.00

    There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of…

  • CVE-2020-14102HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.

  • CVE-2020-14101HigJan 13, 2021
    risk 0.49cvss 7.5epss 0.01

    The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.

  • CVE-2020-14098HigJan 13, 2021
    risk 0.49cvss 7.5epss 0.01

    The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.

  • CVE-2020-14097HigJan 13, 2021
    risk 0.49cvss 7.5epss 0.01

    Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18.

  • CVE-2013-1053MedJan 13, 2021
    risk 0.36cvss 5.5epss 0.00

    In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the file. This issue affects version 1.0.0-0ubuntu3 and prior versions.

  • CVE-2021-1360HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1311MedJan 13, 2021
    risk 0.35cvss 5.4epss 0.01

    A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is due to a lack of protection against brute forcing of the host…

  • CVE-2021-1310MedJan 13, 2021
    risk 0.31cvss 4.7epss 0.02

    A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism that should prompt the user before the redirection. This vulnerability is…

  • CVE-2021-1307HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1267MedJan 13, 2021
    risk 0.28cvss 4.3epss 0.01

    A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An…

  • CVE-2021-1258MedJan 13, 2021
    risk 0.36cvss 5.5epss 0.00

    A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient…

  • CVE-2021-1246MedJan 13, 2021
    risk 0.42cvss 6.5epss 0.01

    Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an…

  • CVE-2021-1245MedJan 13, 2021
    risk 0.42cvss 6.5epss 0.01

    Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability A vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)…

  • CVE-2021-1242MedJan 13, 2021
    risk 0.28cvss 4.3epss 0.01

    A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software mishandles character rendering. An attacker could exploit this vulnerability by…

  • CVE-2021-1240MedJan 13, 2021
    risk 0.31cvss 4.8epss 0.01

    A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This…

  • CVE-2021-1239MedJan 13, 2021
    risk 0.31cvss 4.8epss 0.01

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The…

  • CVE-2021-1238MedJan 13, 2021
    risk 0.31cvss 4.8epss 0.01

    Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The…

  • CVE-2021-1237HigJan 13, 2021
    risk 0.51cvss 7.8epss 0.00

    A vulnerability in the Network Access Manager and Web Security Agent components of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL injection attack. To exploit this vulnerability, the attacker would need to have…

  • CVE-2021-1236MedJan 13, 2021
    risk 0.35cvss 5.3epss 0.02

    Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An…

  • CVE-2021-1226MedJan 13, 2021
    risk 0.28cvss 4.3epss 0.01

    A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco…

  • CVE-2021-1224MedJan 13, 2021
    risk 0.38cvss 5.8epss 0.02

    Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect…

  • CVE-2021-1223HigJan 13, 2021
    risk 0.49cvss 7.5epss 0.02

    Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of an HTTP range header. An attacker could…

  • CVE-2021-1217HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1216HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1215HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1214HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1213HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1212HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.03

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1211HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1210HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1209HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1208HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1207HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1206HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1205HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1204HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1203HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.03

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1202HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1201HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1200HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1199HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1198HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1197HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1196HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.02

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1195HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.03

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…

  • CVE-2021-1194HigJan 13, 2021
    risk 0.47cvss 7.2epss 0.03

    Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are…