https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 21:57:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00986 bdu:2020-00986 https://cve.radiocsirt.org/vuln/bdu:2020-00986 https://cve.radiocsirt.org/vuln/certfr-2020-avi-128 certfr-2020-avi-128 https://cve.radiocsirt.org/vuln/certfr-2020-avi-128 https://cve.radiocsirt.org/vuln/cisco-sa-cpnr-csrf-wwtrdkyl <p>A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections in the web-based interface. An attacker could exploit this vulnerability by persuading a targeted user, with an active administrative session on the affected device, to click a malicious link. A successful exploit could allow an attacker to change the device&#39;s configuration, which could include the ability to edit or create user accounts of any privilege level. Some changes to the device&#39;s configuration could negatively impact the availability of networking services for other devices on networks managed by CPNR. Cisco has released software updates that address the vulnerability described in this advisory. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpnr-csrf-WWTrDkyL [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpnr-csrf-WWTrDkyL&#34;]</p> <p>A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections in the web-based interface. An attacker could exploit this vulnerability by persuading a targeted user, with an active administrative session on the affected device, to click a malicious link. A successful exploit could allow an attacker to change the device&#39;s configuration, which could include the ability to edit or create user accounts of any privilege level. Some changes to the device&#39;s configuration could negatively impact the availability of networking services for other devices on networks managed by CPNR. Cisco has released software updates that address the vulnerability described in this advisory. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpnr-csrf-WWTrDkyL [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpnr-csrf-WWTrDkyL&#34;]</p> https://cve.radiocsirt.org/vuln/cisco-sa-cpnr-csrf-wwtrdkyl https://cve.radiocsirt.org/vuln/euvd-2026-202040 EUVD-2026-202040 https://cve.radiocsirt.org/vuln/euvd-2026-202040 https://cve.radiocsirt.org/vuln/fkie_cve-2020-3148 <p>A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections in the web-based interface. An attacker could exploit this vulnerability by persuading a targeted user, with an active administrative session on the affected device, to click a malicious link. A successful exploit could allow an attacker to change the device&#39;s configuration, which could include the ability to edit or create user accounts of any privilege level. Some changes to the device&#39;s configuration could negatively impact the availability of networking services for other devices on networks managed by CPNR.</p> <p>A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections in the web-based interface. An attacker could exploit this vulnerability by persuading a targeted user, with an active administrative session on the affected device, to click a malicious link. A successful exploit could allow an attacker to change the device&#39;s configuration, which could include the ability to edit or create user accounts of any privilege level. Some changes to the device&#39;s configuration could negatively impact the availability of networking services for other devices on networks managed by CPNR.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-3148 https://cve.radiocsirt.org/vuln/ghsa-225v-j4r6-q4hx <p>A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections in the web-based interface. An attacker could exploit this vulnerability by persuading a targeted user, with an active administrative session on the affected device, to click a malicious link. A successful exploit could allow an attacker to change the device&#39;s configuration, which could include the ability to edit or create user accounts of any privilege level. Some changes to the device&#39;s configuration could negatively impact the availability of networking services for other devices on networks managed by CPNR.</p> <p>A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections in the web-based interface. An attacker could exploit this vulnerability by persuading a targeted user, with an active administrative session on the affected device, to click a malicious link. A successful exploit could allow an attacker to change the device&#39;s configuration, which could include the ability to edit or create user accounts of any privilege level. Some changes to the device&#39;s configuration could negatively impact the availability of networking services for other devices on networks managed by CPNR.</p> https://cve.radiocsirt.org/vuln/ghsa-225v-j4r6-q4hx https://cve.radiocsirt.org/vuln/gsd-2020-3148 gsd-2020-3148 https://cve.radiocsirt.org/vuln/gsd-2020-3148