https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:40:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02742 bdu:2020-02742 https://cve.radiocsirt.org/vuln/bdu:2020-02742 https://cve.radiocsirt.org/vuln/certfr-2020-avi-340 certfr-2020-avi-340 https://cve.radiocsirt.org/vuln/certfr-2020-avi-340 https://cve.radiocsirt.org/vuln/cisco-sa-web-cmdinj3-44st5cca <p>A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by uploading a crafted file to the web UI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands with root privileges on the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-web-cmdinj3-44st5CcA [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-web-cmdinj3-44st5CcA&#34;] This advisory is part of the June 3, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 23 Cisco Security Advisories that describe 25 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34; https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-73388&#34;].</p> <p>A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by uploading a crafted file to the web UI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands with root privileges on the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-web-cmdinj3-44st5CcA [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-web-cmdinj3-44st5CcA&#34;] This advisory is part of the June 3, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 23 Cisco Security Advisories that describe 25 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34; https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-73388&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-web-cmdinj3-44st5cca https://cve.radiocsirt.org/vuln/cnvd-2020-31962 cnvd-2020-31962 https://cve.radiocsirt.org/vuln/cnvd-2020-31962 https://cve.radiocsirt.org/vuln/euvd-2026-201943 EUVD-2026-201943 https://cve.radiocsirt.org/vuln/euvd-2026-201943 https://cve.radiocsirt.org/vuln/fkie_cve-2020-3212 <p>A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by uploading a crafted file to the web UI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands with root privileges on the device.</p> <p>A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by uploading a crafted file to the web UI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands with root privileges on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-3212 https://cve.radiocsirt.org/vuln/ghsa-5339-qqh7-6fh8 <p>A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by uploading a crafted file to the web UI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands with root privileges on the device.</p> <p>A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by uploading a crafted file to the web UI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands with root privileges on the device.</p> https://cve.radiocsirt.org/vuln/ghsa-5339-qqh7-6fh8 https://cve.radiocsirt.org/vuln/gsd-2020-3212 gsd-2020-3212 https://cve.radiocsirt.org/vuln/gsd-2020-3212