https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:35:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08697 bdu:2024-08697 https://cve.radiocsirt.org/vuln/bdu:2024-08697 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0897 certfr-2024-avi-0897 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0897 https://cve.radiocsirt.org/vuln/cisco-sa-ata19x-multi-rdteqrsy <p>Multiple vulnerabilities in Cisco ATA 190 Series Analog Telephone Adapter firmware, both on-premises and multiplatform, could allow a remote attacker to delete or change the configuration, execute commands as the root user, conduct a cross-site scripting (XSS) attack against a user of the interface, view passwords, conduct a cross-site request forgery (CSRF) attack, or reboot the device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released firmware updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. However, there is a mitigation that addresses some of these vulnerabilities for Cisco ATA 191 on-premises firmware only.</p> <p>Multiple vulnerabilities in Cisco ATA 190 Series Analog Telephone Adapter firmware, both on-premises and multiplatform, could allow a remote attacker to delete or change the configuration, execute commands as the root user, conduct a cross-site scripting (XSS) attack against a user of the interface, view passwords, conduct a cross-site request forgery (CSRF) attack, or reboot the device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released firmware updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. However, there is a mitigation that addresses some of these vulnerabilities for Cisco ATA 191 on-premises firmware only.</p> https://cve.radiocsirt.org/vuln/cisco-sa-ata19x-multi-rdteqrsy https://cve.radiocsirt.org/vuln/euvd-2026-198726 EUVD-2026-198726 https://cve.radiocsirt.org/vuln/euvd-2026-198726 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20460 <p>A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user&amp;nbsp;to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information on an affected device.</p> <p>A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user&amp;nbsp;to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information on an affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20460 https://cve.radiocsirt.org/vuln/ghsa-p7rx-j8x8-2j2p <p>A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user.</p> <p>This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user&amp;nbsp;to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information on an affected device.</p> <p>A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user.</p> <p>This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user&amp;nbsp;to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information on an affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-p7rx-j8x8-2j2p https://cve.radiocsirt.org/vuln/gsd-2024-20460 gsd-2024-20460 https://cve.radiocsirt.org/vuln/gsd-2024-20460 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3223 <p>Ein Angreifer kann mehrere Schwachstellen im Cisco Analog Telephone Adaptor ATA 191 und ATA 192 ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Cisco Analog Telephone Adaptor ATA 191 und ATA 192 ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3223