Lucene search
+L

46 matches found

CNNVD
CNNVD
•added 2024/08/07 12:00 a.m.•21 views

Cisco Small Business SPA300 Series IP Phones和Cisco Small Business SPA500 Series IP Phones 安全漏洞

Cisco Small Business SPA500 Series IP Phones and Cisco Small Business SPA300 Series IP Phones are both products of Cisco, Inc.Cisco Small Business SPA500 Series IP Phones are an SPA500 Series IP Phone. The Cisco Small Business SPA500 Series IP Phones are SPA500 Series IP Phones.The Cisco Small...

9.8CVSS7.8AI score0.066EPSS
SaveExploits0References2
NVD
NVD
•added 2024/04/12 3:15 p.m.•33 views

CVE-2024-21605

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS6.5AI score0.00295EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/04/12 3:15 p.m.•23 views

CVE-2024-21605

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS5.7AI score0.00295EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/12 2:54 p.m.•29 views

CVE-2024-21605 Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS6.9AI score0.00295EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/12 2:54 p.m.•132 views

CVE-2024-21605

CVE-2024-21605 - Junos OS SRX 300 Series PFE DoS : A resource overload DoS can be triggered by specific link-local traffic that is not blocked for STP-blocked ports, sending traffic to the control plane and exhausting resources. This is an Exposure of Resource to Wrong Sphere vulnerability in the...

7.1CVSS6.8AI score0.00295EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/12 12:00 a.m.•8 views

CVE-2024-21605: Exposure of Resource to Wrong Sphere

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX 300 Series allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. Specific valid link-local traffic is not blocked on ports in STP blocked state bu...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/10 12:00 a.m.•25 views

PT-2024-2886 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.2R3-S3 through 21.2R3-S6 Juniper Networks Junos OS versions 22.1R3 through 22.1R3-S4 Juniper Networks Junos OS versions 22.2R2 through 22.2R3-S2 Juniper Networks Junos OS versions 22.3R2 through 22.3R3-S1...

7.1CVSS6.8AI score0.00295EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/28 12:00 a.m.•9 views

CVE-2023-20188: Improper Neutralization of Alternate XSS Syntax

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

4.8CVSS5.9AI score0.00483EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/06/08 12:00 a.m.•18 views

多款Cisco产品 跨站脚本漏洞

Cisco Small Business 200 Series Smart Switches and so on are the products of the American Cisco Cisco company.Cisco Small Business 200 Series Smart Switches is a small smart switch device.Cisco Small Business 300 Series is an enterprise-class managed switch.Cisco Small Business 300 Series Managed...

4.8CVSS4.9AI score0.00483EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•18 views

PT-2022-6668 · Cisco · Cisco Small Business 500 Series Stackable Managed Switches +2

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 200 Series Smart Switches affected versions not specified Cisco Small Business 300 Series Managed Switches affected versions not specified Cisco Small Business 500 Series Stackable Managed Switches affected versions not...

4.9CVSS4.9AI score0.00483EPSS
SaveExploits0References5
HPE Security Bulletins
HPE Security Bulletins
•added 2022/09/27 12:00 a.m.•24 views

HPESBNW04371 rev.2 - Aruba Access Points, Multiple Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS; Remote: Arbitrary Code Execution, Cross-Site Scripting XSS, Denial of Service DoS, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 100 Series Access Points - See Details section for affected versions...

9.8CVSS6.9AI score0.24639EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/01/07 12:00 a.m.•7 views

PT-2022-9070

Name of the Vulnerable Software and Affected Versions Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets Linear WADWAZ-1 version 3.43 Linear WAPIRZ-1 version 3.43 Description The issue affects Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets, which do not...

8.8CVSS0.00413EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/04 12:00 a.m.•9 views

CVE-2021-40127: Improper Input Validation

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based...

5.3CVSS5.9AI score0.01281EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/11/03 4:00 p.m.•15 views

CVE-2021-40127

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based...

5.3CVSS6.1AI score0.01281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/03 12:00 a.m.•6 views

PT-2021-4812

Name of the Vulnerable Software and Affected Versions Cisco Small Business 200 Series Smart Switches versions affected versions not specified Cisco Small Business 300 Series Managed Switches versions affected versions not specified Cisco Small Business 500 Series Stackable Managed Switches versio...

5.3CVSS0.01281EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/22 12:00 a.m.•7 views

CVE-2021-1551: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

9CVSS6.4AI score0.0166EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/22 12:00 a.m.•10 views

CVE-2021-1549: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

9CVSS6.4AI score0.0166EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/22 12:00 a.m.•8 views

CVE-2021-1552: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to perform command injection attacks against an affected device. These vulnerabilities are due to improper...

9CVSS6.4AI score0.0166EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/21 12:00 a.m.•17 views

Cisco 多款产品命令注入漏洞

Cisco Small Business is a switch from Cisco USA. A command injection vulnerability exists in multiple Cisco products and results from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The...

9CVSS7.1AI score0.0166EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/05/21 12:00 a.m.•21 views

Cisco 多款产品命令注入漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business suffers from a command injection vulnerability that stems from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The followi...

9CVSS7.1AI score0.01577EPSS
SaveExploits0References5
Rows per page
Query Builder