https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 22:24:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-09233 bdu:2024-09233 https://cve.radiocsirt.org/vuln/bdu:2024-09233 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0950 certfr-2024-avi-0950 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0950 https://cve.radiocsirt.org/vuln/cisco-sa-ndfc-sqli-cyppaxrl <p>A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a specific REST API endpoint or web-based management interface. A successful exploit could allow the attacker to read, modify, or delete arbitrary data on an internal database, which could affect the availability of the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a specific REST API endpoint or web-based management interface. A successful exploit could allow the attacker to read, modify, or delete arbitrary data on an internal database, which could affect the availability of the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-ndfc-sqli-cyppaxrl https://cve.radiocsirt.org/vuln/cnvd-2025-03535 cnvd-2025-03535 https://cve.radiocsirt.org/vuln/cnvd-2025-03535 https://cve.radiocsirt.org/vuln/euvd-2026-200615 EUVD-2026-200615 https://cve.radiocsirt.org/vuln/euvd-2026-200615 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20536 <p>A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a specific REST API endpoint or web-based management interface. A successful exploit could allow the attacker to read, modify, or delete arbitrary data on an internal database, which could affect the availability of the device.&amp;nbsp;</p> <p>A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a specific REST API endpoint or web-based management interface. A successful exploit could allow the attacker to read, modify, or delete arbitrary data on an internal database, which could affect the availability of the device.&amp;nbsp;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20536 https://cve.radiocsirt.org/vuln/ghsa-5w27-pxmv-rgxx <p>A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device.</p> <p>This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a specific REST API endpoint or web-based management interface. A successful exploit could allow the attacker to read, modify, or delete arbitrary data on an internal database, which could affect the availability of the device.&amp;nbsp;</p> <p>A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacker with read-only privileges to execute arbitrary SQL commands on an affected device.</p> <p>This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a specific REST API endpoint or web-based management interface. A successful exploit could allow the attacker to read, modify, or delete arbitrary data on an internal database, which could affect the availability of the device.&amp;nbsp;</p> https://cve.radiocsirt.org/vuln/ghsa-5w27-pxmv-rgxx https://cve.radiocsirt.org/vuln/gsd-2024-20536 gsd-2024-20536 https://cve.radiocsirt.org/vuln/gsd-2024-20536 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3354 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Nexus Dashboard ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Nexus Dashboard ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3354