CVE-2024-54010

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

CVE-2024-54010 Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

CVE-2024-54010

CVE-2024-54010 describes a vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches. An unauthenticated adjacent attacker could perform a packet forwarding attack against ICMP and UDP if the switch is configured to allow Layer 3 routing. The attack relies on routin...

Hewlett Packard Enterprise CX 10000 安全漏洞

The Hewlett Packard Enterprise CX 10000 HPE CX 10000 is a series of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise CX 10000 that stems from a firewall component that allows an unauthenticated adjacent attacker to perform packet...

HPESBNW04772 rev.1 - Aruba CX 10000 Switch Series, Traffic Handling Vulnerability

Potential Security Impact: Remote: Unauthorized Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series See summary for affected versions. Affected Products HPE Aruba Networking CX 10000 Switch Series running the following CX Operating System...

CVE-2024-10000

creationtimestamp| type| source ---|---|--- 2024-10-29 08:04:36+00:00| seen| https://t.me/cvedetector/9244...

WordPress Masteriyo - LMS Plugin <= 1.13.3 is vulnerable to Cross Site Scripting (XSS)

Software Masteriyo - LMS Type Plugin Vulnerable versions = 1.13.3 Fixed in 1.13.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10000 Patch priority Low CVSS severity Low 6.5 Developer Masteriyo PSID 896bb27d11e1 Credits floerer Required privilege...

SUSE CVE-2024-45692

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000...

CVE-2024-45692

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000...

CVE-2024-45692

Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000...

CVE-2024-45692

CVE-2024-45692 affects Webmin prior to 2.202 and Virtualmin prior to 7.20.2. The issue is a network traffic loop caused by spoofed UDP packets to port 10000, leading to denial of service. Public sources in connected docs confirm affected versions and the root cause (unreachable exit condition loo...

PT-2024-6378 · Webmin +2 · Webmin +2

Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 2.202 Virtualmin versions prior to 7.20.2 Description: The issue is related to a network traffic loop via spoofed UDP packets on port 10000, which can cause a denial of service. This problem is associated with an...

CVE-2022-48916

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix double listadd when enabling VMD in scalable mode When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform Sapphire Rapids CPU during booting: p...

CVE-2016-10000

Technical details for CVE-2016-10000 are not publicly provided in the supplied documents. No affected products, vectors, or fixes are given. Monitor for updates as new information becomes available.

CVE-2023-51453

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the processpushfile function implemented in the libv2sdk....

CVE-2023-51452

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the pullfilev2proc function implemented in the libv2sdk.s...

CVE-2023-51456

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process memory through a crafted payload due to a missing input sanity check in the v2packarraytomsg function...

CVE-2023-51453

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the processpushfile function implemented in the libv2sdk....

CVE-2023-51453

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the processpushfile function implemented in the libv2sdk....

CVE-2023-6948

A Buffer Copy without Checking Size of Input issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the sdkprintf function implemented in th...