https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:00:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-02138 bdu:2019-02138 https://cve.radiocsirt.org/vuln/bdu:2019-02138 https://cve.radiocsirt.org/vuln/cisco-sa-20190515-cuic-cmdinj <p>A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user’s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user’s browser and Cisco Unified Intelligence Center in the context of the malicious gadget. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-cuic-cmdinj [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-cuic-cmdinj&#34;]</p> <p>A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user’s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user’s browser and Cisco Unified Intelligence Center in the context of the malicious gadget. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-cuic-cmdinj [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-cuic-cmdinj&#34;]</p> https://cve.radiocsirt.org/vuln/cisco-sa-20190515-cuic-cmdinj https://cve.radiocsirt.org/vuln/cnvd-2019-14705 cnvd-2019-14705 https://cve.radiocsirt.org/vuln/cnvd-2019-14705 https://cve.radiocsirt.org/vuln/euvd-2026-203513 EUVD-2026-203513 https://cve.radiocsirt.org/vuln/euvd-2026-203513 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1860 <p>A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user&amp;rsquo;s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user&amp;rsquo;s browser and Cisco Unified Intelligence Center in the context of the malicious gadget.</p> <p>A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user&amp;rsquo;s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user&amp;rsquo;s browser and Cisco Unified Intelligence Center in the context of the malicious gadget.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-1860 https://cve.radiocsirt.org/vuln/ghsa-r32x-9qpj-2884 <p>A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user&amp;rsquo;s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user&amp;rsquo;s browser and Cisco Unified Intelligence Center in the context of the malicious gadget.</p> <p>A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user&amp;rsquo;s browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget validation. An attacker could exploit this vulnerability by forcing a user to load a malicious gadget. A successful exploit could allow the attacker to obtain sensitive information, such as current user credentials, or manipulate data between the user&amp;rsquo;s browser and Cisco Unified Intelligence Center in the context of the malicious gadget.</p> https://cve.radiocsirt.org/vuln/ghsa-r32x-9qpj-2884 https://cve.radiocsirt.org/vuln/gsd-2019-1860 gsd-2019-1860 https://cve.radiocsirt.org/vuln/gsd-2019-1860