CVE Vulnerability Catalog

A security review in Cisco APIC revealed multiple vulnerabilities related to improper neutralization issues (CWE-707). These have been addressed in hardening releases.

A security review in Cisco APIC revealed multiple vulnerabilities related to improper access control (CWE-284). These have been addressed in hardening releases.

Vulnerability in VXLAN OAM (NGOAM) feature of Cisco NX-OS allows unauthenticated remote attacker to execute arbitrary code with root privileges or cause DoS. Due to improper input validation when NGOAM is enabled.

Vulnerability in VXLAN OAM (NGOAM) feature of Cisco NX-OS allows unauthenticated remote attacker to execute arbitrary code with root privileges or cause DoS. Due to improper input validation when NGOAM is enabled.

A security review in Cisco License On-Prem (formerly SSM On-Prem) revealed multiple vulnerabilities related to insufficiently protected credentials (CWE-522). These have been addressed in hardening releases.

A security review in Cisco License On-Prem (formerly SSM On-Prem) revealed multiple vulnerabilities related to improper input verification (CWE-347). These have been addressed in hardening releases.

Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem) contains vulnerabilities related to improper authentication, grouped under CWE-306. They were discovered during an internal security review and addressed in a hardening release.

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a DoS condition. It is due to insufficient input validation of data sent to the NX-API.

A vulnerability in the MPLS OAM feature of Cisco NX-OS Software for Nexus 3000 and 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a DoS condition. It is due to improper validation of MPLS echo-request packets.

The Cisco networking engineering team discovered vulnerabilities related to buffer management (CWE-119) during an internal security review. They were addressed in a hardening release.

A vulnerability in Cisco NX-OS discovered during internal security review concerns out-of-bounds write (CWE-787). It is fixed in a software hardening release.

The Cisco NX-OS team discovered vulnerabilities related to improper access control (CWE-284) during an internal security review. They were addressed in a hardening release.

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem (formerly SSM On-Prem) could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition. It is due to improper input validation and lack of authentication in the management API.

Homer, open source telecom observability software, prior to version 11.0.283 has a vulnerability where JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` when `jwtSecret` is empty. The JWT secret defaults to an empty string, leaving all protected API endpoints completely unauthenticated.

Homer prior to version 11.0.283, on every fresh deployment using internal authentication, automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no first-login forced-change mechanism, allowing any attacker to gain full administrative access.

PraisonAI prior to version 4.6.78 has a vulnerability in the `deploy/api.py` module that generates Python server code by directly interpolating the `agents_file` parameter into an f-string, which is then written to a file and executed via `subprocess.Popen()`. An attacker who controls the `agents_file` value can inject arbitrary Python code.

A vulnerability in the web-based management interface of Cisco License On-Prem (formerly SSM On-Prem) could allow an unauthenticated, remote attacker to gain unauthorized access to the application. It is due to improper checks during the password reset process.

Session Fixation / Session Reuse vulnerability in Apache Jackrabbit. The WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match without credential check. Affects versions from 2.23.0 through 2.23.5, 2.22.0 through 2.22.4, and 2.20.0 through 2.20.17.

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration via GET /config, clear caches, delete cache objects, and modify tenant quotas to evict other tenants' cached data.

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded __import__, to import os and run operating system commands as the LMCache process.