https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:52:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04197 bdu:2024-04197 https://cve.radiocsirt.org/vuln/bdu:2024-04197 https://cve.radiocsirt.org/vuln/cisco-sa-ndru-pesc-kz2pqlzh <p>A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-ndru-pesc-kz2pqlzh https://cve.radiocsirt.org/vuln/euvd-2026-160022 EUVD-2026-160022 https://cve.radiocsirt.org/vuln/euvd-2026-160022 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20282 <p>A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.</p> <p>A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20282 https://cve.radiocsirt.org/vuln/ghsa-mg3q-349p-vcpv <p>A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device.</p> <p>This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.</p> <p>A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device.</p> <p>This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-mg3q-349p-vcpv https://cve.radiocsirt.org/vuln/gsd-2024-20282 gsd-2024-20282 https://cve.radiocsirt.org/vuln/gsd-2024-20282 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0777 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Daten zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Daten zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0777