CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco NX-OS CLI Command Injection Vulnerability (CVE-2024-20399) Security Advisory
[Affected Scope] Cisco NX-OS Software running on Nexus series switches with authenticated Administrator credentials
[Impact] Authenticated administrators can bypass CLI sandboxing and execute arbitrary commands as root on the underlying Linux operating system due to insufficient argument validation
[Mitigation] Apply official Cisco NX-OS software updates immediately and restrict administrative CLI access using robust AAA and ACLs
Sonatype Nexus Repository Manager 3 Missing Access Control and Remote Code Execution (RCE) Vulnerability (CVE-2019-7238) Analysis & Remediation Guide
[Affected Scope] Sonatype Nexus Repository Manager versions prior to 3.15.0
[Impact] Unauthenticated remote attackers can execute arbitrary Groovy scripts and gain full system-level control by sending specially crafted HTTP POST requests
[Mitigation] Immediately upgrade to the latest stable version (3.15.0 or higher) or restrict external access to the vulnerable endpoints