Lucene search
K

22 matches found

CNNVD
CNNVD
added 2024/08/07 12:0 a.m.4 views

Cisco Small Business SPA300 Series IP Phones和Cisco Small Business SPA500 Series IP Phones 安全漏洞

Cisco Small Business SPA500 Series IP Phones and Cisco Small Business SPA300 Series IP Phones are both products of Cisco, Inc.Cisco Small Business SPA500 Series IP Phones are an SPA500 Series IP Phone. The Cisco Small Business SPA500 Series IP Phones are SPA500 Series IP Phones.The Cisco Small...

9.8CVSS7.8AI score0.066EPSS
Exploits0References2
OSV
OSV
added 2024/04/12 3:15 p.m.3 views

CVE-2024-21605

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS5.7AI score0.00295EPSS
Exploits0References2
NVD
NVD
added 2024/04/12 3:15 p.m.13 views

CVE-2024-21605

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS6.5AI score0.00295EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/04/12 2:54 p.m.19 views

CVE-2024-21605 Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS6.9AI score0.00295EPSS
Exploits0References2
CVE
CVE
added 2024/04/12 2:54 p.m.87 views

CVE-2024-21605

CVE-2024-21605 - Junos OS SRX 300 Series PFE DoS : A resource overload DoS can be triggered by specific link-local traffic that is not blocked for STP-blocked ports, sending traffic to the control plane and exhausting resources. This is an Exposure of Resource to Wrong Sphere vulnerability in the...

7.1CVSS6.8AI score0.00295EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.2 views

PT-2024-2886 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.2R3-S3 through 21.2R3-S6 Juniper Networks Junos OS versions 22.1R3 through 22.1R3-S4 Juniper Networks Junos OS versions 22.2R2 through 22.2R3-S2 Juniper Networks Junos OS versions 22.3R2 through 22.3R3-S1...

7.1CVSS6.8AI score0.00295EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/06/08 12:0 a.m.4 views

多款Cisco产品 跨站脚本漏洞

Cisco Small Business 200 Series Smart Switches and so on are the products of the American Cisco Cisco company.Cisco Small Business 200 Series Smart Switches is a small smart switch device.Cisco Small Business 300 Series is an enterprise-class managed switch.Cisco Small Business 300 Series Managed...

4.8CVSS4.9AI score0.00483EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.3 views

PT-2022-6668 · Cisco · Cisco Small Business 500 Series Stackable Managed Switches +2

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 200 Series Smart Switches affected versions not specified Cisco Small Business 300 Series Managed Switches affected versions not specified Cisco Small Business 500 Series Stackable Managed Switches affected versions not...

4.9CVSS4.9AI score0.00483EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/05/21 12:0 a.m.2 views

Cisco 多款产品命令注入漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business suffers from a command injection vulnerability that stems from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The followi...

9CVSS7.1AI score0.01577EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/05/21 12:0 a.m.2 views

Cisco 多款产品命令注入漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business suffers from a command injection vulnerability that stems from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The followi...

9CVSS7.1AI score0.01577EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/05/21 12:0 a.m.2 views

Cisco 多款产品命令注入漏洞

Cisco Small Business is a switch from Cisco USA. A command injection vulnerability exists in multiple Cisco products and results from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The...

9CVSS7.1AI score0.0166EPSS
Exploits0References4
CNVD
CNVD
added 2019/07/04 12:0 a.m.3 views

Cisco Small Business 200, 300, and 500 Series Managed Switches Buffer Overflow Vulnerability

Cisco Small Business 200 Series Managed Switches and so on are the products of the American Cisco Cisco company.Cisco Small Business 200 Series Managed Switches is a 200 Series Managed Switch.Cisco?Small Business 300 Series Managed Switches is a 300 Series Managed Switch.Cisco?Small Business 500...

7.5CVSS7.3AI score0.01772EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.2 views

The vulnerability of DHCP and TFTP services provided by Cisco Small Business 300 Series router microprogramming systems allows a attacker to induce a service failure.

The vulnerability of DHCP and TFTP services provided by Cisco Small Business 300 Series routers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted DHCP packets...

6.8CVSS6.8AI score0.02125EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2019/05/15 11:45 p.m.7 views

CVE-2019-1814 Cisco Small Business 300 Series Managed Switches DHCP Denial of Service Vulnerability

A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series Sx300 Managed Switches could allow an unauthenticated, remote attacker to cause the device to become low on system memory, which in turn could lead to an unexpected reload of the device and...

6.8CVSS7.2AI score0.02125EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.4 views

The vulnerability of the web interface of Cisco Small Business 300 Series microprogramming software routers allows a hacker to inject arbitrary code into the uploaded web page.

The vulnerability of the web interface of Cisco Small Business 300 Series microprogramming software routers is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web page...

4.3CVSS6.1AI score0.00678EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/10/05 2:29 p.m.0 views

CVE-2018-0465

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected system. The vulnerability exists because the affect...

6.1CVSS6AI score
Exploits0References1
CVE
CVE
added 2018/10/05 2:0 p.m.77 views

CVE-2018-0465

Cisco Small Business 300 Series Managed Switches have a cross-site scripting (XSS) vulnerability in the web-based management interface due to insufficient validation of user input. An unauthenticated, remote attacker could lure a user into clicking a malicious link, leading to execution of arbitr...

6.1CVSS5.9AI score0.00801EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2018/08/14 12:0 a.m.2 views

Cisco Small Business 300 Series (Sx300) Managed Switches Cross-Site Scripting Vulnerability (CNVD-2018-16183)

Cisco Small Business 300 Series Sx300 Managed Switches is a 300 series switch device from Cisco USA. A cross-site scripting vulnerability exists in the web-based management interface of the Cisco Small Business 300 Series Sx300 Managed Switches, which stems from the interface not adequately...

5.4CVSS5.5AI score0.00678EPSS
Exploits0References1
Prion
Prion
added 2018/08/01 8:29 p.m.24 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

3.5CVSS5.3AI score0.00678EPSS
Exploits0References2Affected Software28
CVE
CVE
added 2018/08/01 8:0 p.m.59 views

CVE-2018-0407

Cisco Small Business 300 Series (Sx300) Managed Switches web-based management interface is vulnerable to persistent cross-site scripting (XSS) due to insufficient validation of user input. An authenticated, remote attacker could lure a user into clicking a crafted link, allowing arbitrary script ...

5.4CVSS5.2AI score0.00678EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder