https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:18:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01373 bdu:2024-01373 https://cve.radiocsirt.org/vuln/bdu:2024-01373 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0103 certfr-2024-avi-0103 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0103 https://cve.radiocsirt.org/vuln/cisco-sa-expressway-csrf-knnzdmj3 <p>Multiple vulnerabilities in the Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks, which could allow the attacker to perform arbitrary actions on an affected device. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct cross-site request forgery (CSRF) attacks, which could allow the attacker to perform arbitrary actions on an affected device. Note: Cisco Expressway Series refers to Cisco Expressway Control (Expressway-C) devices and Cisco Expressway Edge (Expressway-E) devices. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-expressway-csrf-knnzdmj3 https://cve.radiocsirt.org/vuln/cnvd-2025-06740 cnvd-2025-06740 https://cve.radiocsirt.org/vuln/cnvd-2025-06740 https://cve.radiocsirt.org/vuln/euvd-2026-238510 EUVD-2026-238510 https://cve.radiocsirt.org/vuln/euvd-2026-238510 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20255 <p>A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.</p> <p>A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20255 https://cve.radiocsirt.org/vuln/ghsa-ccj9-9hx6-vgjf <p>A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.</p> <p>This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.</p> <p>A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system.</p> <p>This vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected system. An attacker could exploit this vulnerability by persuading a user of the REST API to follow a crafted link. A successful exploit could allow the attacker to cause the affected system to reload.</p> https://cve.radiocsirt.org/vuln/ghsa-ccj9-9hx6-vgjf https://cve.radiocsirt.org/vuln/gsd-2024-20255 gsd-2024-20255 https://cve.radiocsirt.org/vuln/gsd-2024-20255 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0321 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Expressway ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco Expressway ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0321