https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:22:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00016 bdu:2019-00016 https://cve.radiocsirt.org/vuln/bdu:2019-00016 https://cve.radiocsirt.org/vuln/certfr-2018-avi-605 certfr-2018-avi-605 https://cve.radiocsirt.org/vuln/certfr-2018-avi-605 https://cve.radiocsirt.org/vuln/cisco-sa-20181219-asa-privesc <p>A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.</p> <p>A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-20181219-asa-privesc https://cve.radiocsirt.org/vuln/cnvd-2019-00338 cnvd-2019-00338 https://cve.radiocsirt.org/vuln/cnvd-2019-00338 https://cve.radiocsirt.org/vuln/euvd-2026-204304 EUVD-2026-204304 https://cve.radiocsirt.org/vuln/euvd-2026-204304 https://cve.radiocsirt.org/vuln/fkie_cve-2018-15465 <p>A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device.</p> <p>A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-15465 https://cve.radiocsirt.org/vuln/ghsa-wccp-c983-j22q <p>A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device.</p> <p>A vulnerability in the authorization subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, but unprivileged (levels 0 and 1), remote attacker to perform privileged actions by using the web management interface. The vulnerability is due to improper validation of user privileges when using the web management interface. An attacker could exploit this vulnerability by sending specific HTTP requests via HTTPS to an affected device as an unprivileged user. An exploit could allow the attacker to retrieve files (including the running configuration) from the device or to upload and replace software images on the device.</p> https://cve.radiocsirt.org/vuln/ghsa-wccp-c983-j22q https://cve.radiocsirt.org/vuln/gsd-2018-15465 gsd-2018-15465 https://cve.radiocsirt.org/vuln/gsd-2018-15465