1271 matches found
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to an uncontrolled element in the search process, allows a hacker to trigger a service failure.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to errors in privilege management, allows a perpetrator to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to the use of rigidly encrypted account data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform lies in the use of rigidly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to insufficient channel limitation for certain endpoints, allows a perpetrator to cause service interruptions.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform lies in the insufficient channel limitation for specified endpoints. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2024-43397
Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...
CVE-2024-25734
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts...
CVE-2024-25736
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /device/reboot GET request...
CVE-2024-25735
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request...
CVE-2024-32971
Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. The affected versions of Apollo Router contain a bug that in limited circumstances, could lead to unexpected operations being executed which can result in unintended data or...
CVE-2023-41317
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when GraphQL Subscriptions are...
CVE-2023-45812
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...
CVE-2023-30959
In Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction...
CVE-2022-4962
A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /users of the component Configuration Center. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been...
CVE-2021-25168
The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function...
CVE-2021-25171
The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function...
CVE-2021-25169
The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function...
CVE-2021-26577
The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function...
CVE-2021-25142
The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function...