https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 05:09:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01077 bdu:2024-01077 https://cve.radiocsirt.org/vuln/bdu:2024-01077 https://cve.radiocsirt.org/vuln/cisco-sa-thouseyes-privesc-dmzhg3qv <p>A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-thouseyes-privesc-dmzhg3qv https://cve.radiocsirt.org/vuln/euvd-2026-197176 EUVD-2026-197176 https://cve.radiocsirt.org/vuln/euvd-2026-197176 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20277 <p>A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.</p> <p>A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20277 https://cve.radiocsirt.org/vuln/ghsa-w7jv-24hg-q599 <p>A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.</p> <p>A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.</p> https://cve.radiocsirt.org/vuln/ghsa-w7jv-24hg-q599 https://cve.radiocsirt.org/vuln/gsd-2024-20277 gsd-2024-20277 https://cve.radiocsirt.org/vuln/gsd-2024-20277