|
222451
|
6.1 |
MEDIUM
Network
|
cisco
|
stealthwatch_enterprise
|
A vulnerability in the web-based management interface of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of…
|
CWE-79
Cross-site Scripting
|
CVE-2019-15994
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222452
|
5.3 |
MEDIUM
Network
|
cisco
|
rv016_multi-wan_vpn_firmware rv042_dual_wan_vpn_firmware rv042g_dual_gigabit_wan_vpn_firmware rv082_dual_wan_vpn_firmware
|
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based …
|
NVD-CWE-Other
|
CVE-2019-15990
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222453
|
5.3 |
MEDIUM
Network
|
cisco
|
email_security_appliance_firmware
|
A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation f…
|
CWE-20
Improper Input Validation
|
CVE-2019-15988
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222454
|
5.3 |
MEDIUM
Network
|
cisco
|
webex_meetings_server webex_meetings_online webex_training_center webex_meeting_center webex_event_center webex_support_center
|
A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attack…
|
CWE-287
Improper Authentication
|
CVE-2019-15987
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222455
|
6.7 |
MEDIUM
Local
|
cisco
|
unity_express
|
A vulnerability in the CLI of Cisco Unity Express could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. To exploit this vulnerability, an a…
|
CWE-20
Improper Input Validation
|
CVE-2019-15986
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222456
|
8.8 |
HIGH
Network
|
cisco
|
unified_communications_manager
|
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The…
|
CWE-89
SQL Injection
|
CVE-2019-15972
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222457
|
4.3 |
MEDIUM
Network
|
cisco
|
email_security_appliance_firmware
|
A vulnerability in the MP3 detection engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on …
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2019-15971
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222458
|
5.4 |
MEDIUM
Network
|
cisco
|
unified_communications_domain_manager hosted_collaboration_solution
|
A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager (Unified CDM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS…
|
CWE-79
Cross-site Scripting
|
CVE-2019-15968
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222459
|
6.1 |
MEDIUM
Network
|
cisco
|
network_level_service industrial_network_director
|
A vulnerability in the web-based management interface of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against…
|
CWE-79
Cross-site Scripting
|
CVE-2019-15973
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222460
|
4.4 |
MEDIUM
Local
|
cisco
|
telepresence_collaboration_endpoint roomos
|
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. …
|
NVD-CWE-Other
|
CVE-2019-15967
|
2024-11-21 13:29 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|