|
223101
|
7.4 |
HIGH
Adjacent
|
cisco
|
adaptive_security_appliance adaptive_security_appliance_software firepower_threat_defense
|
A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthentica…
|
NVD-CWE-noinfo
|
CVE-2019-12676
|
2024-11-21 13:23 |
2019-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223102
|
8.8 |
HIGH
Local
|
cisco
|
firepower_threat_defense firepower_9300_firmware firepower_4115_firmware firepower_4125_firmware firepower_4145_firmware firepower_4110_firmware firepower_4120_firmware firepower…
|
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and…
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2019-12675
|
2024-11-21 13:23 |
2019-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223103
|
8.2 |
HIGH
Local
|
cisco
|
firepower_threat_defense firepower_9300_firmware firepower_4115_firmware firepower_4125_firmware firepower_4145_firmware firepower_4110_firmware firepower_4120_firmware firepower…
|
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and…
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2019-12674
|
2024-11-21 13:23 |
2019-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223104
|
7.5 |
HIGH
Network
|
cisco
|
adaptive_security_appliance adaptive_security_appliance_software firepower_threat_defense
|
A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a den…
|
CWE-20
Improper Input Validation
|
CVE-2019-12673
|
2024-11-21 13:23 |
2019-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223105
|
6.1 |
MEDIUM
Network
|
cisco
|
identity_services_engine
|
A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of …
|
CWE-79
Cross-site Scripting
|
CVE-2019-12631
|
2024-11-21 13:23 |
2019-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223106
|
9.8 |
CRITICAL
Network
|
cisco
|
security_manager
|
A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerabil…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2019-12630
|
2024-11-21 13:23 |
2019-10-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223107
|
6.1 |
MEDIUM
Network
|
dnnsoftware
|
dotnetnuke
|
Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page. The exploit could be used to per…
|
CWE-79
Cross-site Scripting
|
CVE-2019-12562
|
2024-11-21 13:23 |
2019-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223108
|
2.7 |
LOW
Network
|
silverstripe
|
silverstripe
|
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.
|
NVD-CWE-noinfo
|
CVE-2019-12617
|
2024-11-21 13:23 |
2019-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223109
|
7.8 |
HIGH
Local
|
cisco
|
nx-os
|
A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linu…
|
CWE-78
OS Command
|
CVE-2019-12717
|
2024-11-21 13:23 |
2019-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223110
|
6.7 |
MEDIUM
Local
|
cisco
|
ios_xr
|
A vulnerability in a CLI command related to the virtualization manager (VMAN) in Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an authenticated, local attac…
|
CWE-78
OS Command
|
CVE-2019-12709
|
2024-11-21 13:23 |
2019-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|