https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 23:25:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06098 bdu:2024-06098 https://cve.radiocsirt.org/vuln/bdu:2024-06098 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0661 certfr-2024-avi-0661 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0661 https://cve.radiocsirt.org/vuln/cisco-sa-spa-http-vulns-rjzmx2xz <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an attacker to execute arbitrary commands on the underlying operating system or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has not released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an attacker to execute arbitrary commands on the underlying operating system or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details [&#34;#details&#34;] section of this advisory. Cisco has not released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.</p> https://cve.radiocsirt.org/vuln/cisco-sa-spa-http-vulns-rjzmx2xz https://cve.radiocsirt.org/vuln/euvd-2026-159537 EUVD-2026-159537 https://cve.radiocsirt.org/vuln/euvd-2026-159537 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20450 <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges. These vulnerabilities exist because incoming HTTP packets are not properly checked for errors, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to overflow an internal buffer and execute arbitrary commands at the root privilege level.</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges. These vulnerabilities exist because incoming HTTP packets are not properly checked for errors, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to overflow an internal buffer and execute arbitrary commands at the root privilege level.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20450 https://cve.radiocsirt.org/vuln/ghsa-63v5-86j4-m83w <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges.</p> <p>These vulnerabilities exist because incoming HTTP packets are not properly checked for errors, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to overflow an internal buffer and execute arbitrary commands at the root privilege level.</p> <p>Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges.</p> <p>These vulnerabilities exist because incoming HTTP packets are not properly checked for errors, which could result in a buffer overflow. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to overflow an internal buffer and execute arbitrary commands at the root privilege level.</p> https://cve.radiocsirt.org/vuln/ghsa-63v5-86j4-m83w https://cve.radiocsirt.org/vuln/gsd-2024-20450 gsd-2024-20450 https://cve.radiocsirt.org/vuln/gsd-2024-20450 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1796 <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Cisco IP Phone ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Cisco IP Phone ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1796