https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:44:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00118 bdu:2024-00118 https://cve.radiocsirt.org/vuln/bdu:2024-00118 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0026 certfr-2024-avi-0026 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0026 https://cve.radiocsirt.org/vuln/cisco-sa-cuc-unauth-afu-froyscsd <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by uploading arbitrary files to an affected system. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by uploading arbitrary files to an affected system. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-cuc-unauth-afu-froyscsd https://cve.radiocsirt.org/vuln/cnvd-2024-10471 cnvd-2024-10471 https://cve.radiocsirt.org/vuln/cnvd-2024-10471 https://cve.radiocsirt.org/vuln/euvd-2026-242363 EUVD-2026-242363 https://cve.radiocsirt.org/vuln/euvd-2026-242363 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20272 <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by uploading arbitrary files to an affected system. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.</p> <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by uploading arbitrary files to an affected system. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20272 https://cve.radiocsirt.org/vuln/ghsa-vxjc-53hv-3fh8 <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by uploading arbitrary files to an affected system. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.</p> <p>A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a specific API and improper validation of user-supplied data. An attacker could exploit this vulnerability by uploading arbitrary files to an affected system. A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root.</p> https://cve.radiocsirt.org/vuln/ghsa-vxjc-53hv-3fh8 https://cve.radiocsirt.org/vuln/gsd-2024-20272 gsd-2024-20272 https://cve.radiocsirt.org/vuln/gsd-2024-20272 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0063 <p>Ein entfernter anonymer Angreifer kann eine Schwachstelle in Cisco Unity Connection ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Code auszuführen.</p> <p>Ein entfernter anonymer Angreifer kann eine Schwachstelle in Cisco Unity Connection ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0063