https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:37:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08146 bdu:2023-08146 https://cve.radiocsirt.org/vuln/bdu:2023-08146 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0906 certfr-2023-avi-0906 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0906 https://cve.radiocsirt.org/vuln/cisco-sa-ise-file-upload-fcelp4xs <p>Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an attacker to upload arbitrary files or disable Cisco Discovery Protocol (CDP) processing on an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an attacker to upload arbitrary files or disable Cisco Discovery Protocol (CDP) processing on an affected device. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-ise-file-upload-fcelp4xs https://cve.radiocsirt.org/vuln/euvd-2026-7962 EUVD-2026-7962 https://cve.radiocsirt.org/vuln/euvd-2026-7962 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20195 <p>Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit these vulnerabilities by uploading a crafted file to an affected device. A successful exploit could allow the attacker to store malicious files in specific directories on the device. The attacker could later use those files to conduct additional attacks, including executing arbitrary code on the affected device with root privileges.</p> <p>Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit these vulnerabilities by uploading a crafted file to an affected device. A successful exploit could allow the attacker to store malicious files in specific directories on the device. The attacker could later use those files to conduct additional attacks, including executing arbitrary code on the affected device with root privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-20195 https://cve.radiocsirt.org/vuln/ghsa-m8cq-xmhh-jr5v <p>Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit these vulnerabilities by uploading a crafted file to an affected device. A successful exploit could allow the attacker to store malicious files in specific directories on the device. The attacker could later use those files to conduct additional attacks, including executing arbitrary code on the affected device with root privileges.</p> <p>Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilities, an attacker must have valid Administrator credentials on the affected device. These vulnerabilities are due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit these vulnerabilities by uploading a crafted file to an affected device. A successful exploit could allow the attacker to store malicious files in specific directories on the device. The attacker could later use those files to conduct additional attacks, including executing arbitrary code on the affected device with root privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-m8cq-xmhh-jr5v https://cve.radiocsirt.org/vuln/gsd-2023-20195 gsd-2023-20195 https://cve.radiocsirt.org/vuln/gsd-2023-20195 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2805 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2805