CVE Vulnerability Catalog

A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco ASA and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass security protections. This is due to improper handling of network requests by devices configured with object group search. An attacker could send a specially crafted request to bypass ACL rules and send traffic to unauthorized hosts.

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more details, see the Details section of the Cisco advisory.

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an attacker to perform a cross-site scripting (XSS) attack or an open redirect attack.

A vulnerability in Cisco Firepower Threat Defense (FTD) Software allows an authenticated local attacker with administrative privileges to overwrite or append arbitrary data to system files with root privileges. This is due to incomplete validation of user input for a specific CLI command.

Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information, see the Details section of the advisory.

Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information, see the Details section of the advisory.

Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. This is due to incomplete processing during deep packet inspection for ENIP packets. An attacker could send a crafted ENIP packet to bypass access control and intrusion policies.

jQuery UI prior to version 1.13.0 is vulnerable to execution of untrusted code when the value of the `of` option of the `.position()` utility is accepted from untrusted sources. The issue is fixed in 1.13.0, where any string value passed to the `of` option is treated as a CSS selector.

jQuery UI prior to version 1.13.0 is vulnerable to execution of untrusted code when the values of various `*Text` options of the Datepicker widget are accepted from untrusted sources. The issue is fixed in 1.13.0, where values passed to various `*Text` options are always treated as pure text, not HTML.

jQuery UI prior to version 1.13.0 is vulnerable to execution of untrusted code when the value of the `altField` option of the Datepicker widget is accepted from untrusted sources. The issue is fixed in 1.13.0, where any string value passed to the `altField` option is treated as a CSS selector.

In Oracle PeopleSoft Enterprise CS Campus Community (Notification Framework) versions 9.0 and 9.2, a low-privileged attacker with physical access to the communication segment can gain unauthorized access to critical data or all accessible data.

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6, allowing attackers to create a new administrator account without authentication.

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.

An XSS vulnerability in Afian FileRun 2021.03.26 allows an attacker to inject malicious scripts when an administrator uses the HTML Editor to preview or edit a crafted document.

An SSRF vulnerability in NagiosXI up to version 5.8.4 allows authenticated users to create scheduled reports with PDF screenshots of any view. Lack of input sanitization enables replacing the target page with an SSRF payload.

Afian FileRun 2021.03.26 is vulnerable to stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs. An attacker can inject malicious JavaScript code.

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the /user/release.html component, allowing attackers to arbitrarily add an administrator cookie.

When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. Curl would then upgrade to TLS but not flush the in-queue of cached responses, instead continuing to use and trust responses received before the TLS handshake as if they were authenticated. This flaw allows a Man-In-The-Middle attacker to inject fake responses, pass through TLS traffic from the legitimate server, and trick curl into sending data back to the user thinking the injected data comes from the TLS-protected server.

In Progress WhatsUp Gold before version 21.1.0, an application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.