https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:45:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04501 bdu:2023-04501 https://cve.radiocsirt.org/vuln/bdu:2023-04501 https://cve.radiocsirt.org/vuln/cisco-sa-spa-web-multi-7kvpmu2f <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) or HTML injection attacks. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) or HTML injection attacks. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-spa-web-multi-7kvpmu2f https://cve.radiocsirt.org/vuln/cnvd-2023-61392 cnvd-2023-61392 https://cve.radiocsirt.org/vuln/cnvd-2023-61392 https://cve.radiocsirt.org/vuln/euvd-2026-7992 EUVD-2026-7992 https://cve.radiocsirt.org/vuln/euvd-2026-7992 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20181 <p>A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.</p> <p>A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20181 https://cve.radiocsirt.org/vuln/ghsa-44cq-gv9f-h346 <p>A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.</p> <p>A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct XSS attacks. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.</p> https://cve.radiocsirt.org/vuln/ghsa-44cq-gv9f-h346 https://cve.radiocsirt.org/vuln/gsd-2023-20181 gsd-2023-20181 https://cve.radiocsirt.org/vuln/gsd-2023-20181 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1840 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Small Business SPA500 Series IP Phones. ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Small Business SPA500 Series IP Phones. ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1840