https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:24:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02601 bdu:2024-02601 https://cve.radiocsirt.org/vuln/bdu:2024-02601 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0270 certfr-2024-avi-0270 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0270 https://cve.radiocsirt.org/vuln/cisco-sa-ndfc-dir-trav-ssn3aydw <p>A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files. This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this vulnerability through direct web requests to the provisioning server. A successful exploit could allow the attacker to read sensitive files in the PnP container that could facilitate further attacks on the PnP infrastructure. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files. This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this vulnerability through direct web requests to the provisioning server. A successful exploit could allow the attacker to read sensitive files in the PnP container that could facilitate further attacks on the PnP infrastructure. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-ndfc-dir-trav-ssn3aydw https://cve.radiocsirt.org/vuln/euvd-2026-3647 EUVD-2026-3647 https://cve.radiocsirt.org/vuln/euvd-2026-3647 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20348 <p>A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files. This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this vulnerability through direct web requests to the provisioning server. A successful exploit could allow the attacker to read sensitive files in the PnP container that could facilitate further attacks on the PnP infrastructure.</p> <p>A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files. This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this vulnerability through direct web requests to the provisioning server. A successful exploit could allow the attacker to read sensitive files in the PnP container that could facilitate further attacks on the PnP infrastructure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20348 https://cve.radiocsirt.org/vuln/ghsa-m7q5-x69w-qc6v <p>A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files.</p> <p>This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this vulnerability through direct web requests to the provisioning server. A successful exploit could allow the attacker to read sensitive files in the PnP container that could facilitate further attacks on the PnP infrastructure.</p> <p>A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files.</p> <p>This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this vulnerability through direct web requests to the provisioning server. A successful exploit could allow the attacker to read sensitive files in the PnP container that could facilitate further attacks on the PnP infrastructure.</p> https://cve.radiocsirt.org/vuln/ghsa-m7q5-x69w-qc6v https://cve.radiocsirt.org/vuln/gsd-2024-20348 gsd-2024-20348 https://cve.radiocsirt.org/vuln/gsd-2024-20348 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0777 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Daten zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um beliebigen Programmcode auszuführen, seine Privilegien zu erweitern, Daten zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0777