https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:13:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-03816 bdu:2024-03816 https://cve.radiocsirt.org/vuln/bdu:2024-03816 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0357 certfr-2024-avi-0357 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0357 https://cve.radiocsirt.org/vuln/cisco-sa-ipphone-multi-vulns-cxahcvs <p>Multiple vulnerabilities in Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition, gain unauthorized access, or view sensitive information on an affected system. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in Cisco IP Phone firmware could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition, gain unauthorized access, or view sensitive information on an affected system. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-ipphone-multi-vulns-cxahcvs https://cve.radiocsirt.org/vuln/euvd-2026-3680 EUVD-2026-3680 https://cve.radiocsirt.org/vuln/euvd-2026-3680 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20378 <p>A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.</p> <p>A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20378 https://cve.radiocsirt.org/vuln/ghsa-q87c-gjjf-xqfw <p>A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.</p> <p>This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.</p> <p>A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device.</p> <p>This vulnerability is due to a lack of authentication for specific endpoints of the web-based management interface on an affected device. An attacker could exploit this vulnerability by connecting to the affected device. A successful exploit could allow the attacker to gain unauthorized access to the device, enabling the recording of user credentials and traffic to and from the affected device, including VoIP calls that could be replayed.</p> https://cve.radiocsirt.org/vuln/ghsa-q87c-gjjf-xqfw https://cve.radiocsirt.org/vuln/gsd-2024-20378 gsd-2024-20378 https://cve.radiocsirt.org/vuln/gsd-2024-20378 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1013 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco IP Phone ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder um Anrufe zu initiieren oder Töne auf dem Gerät abzuspielen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco IP Phone ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder um Anrufe zu initiieren oder Töne auf dem Gerät abzuspielen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1013