Lucene search
+L

149 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-5834

Malware in sbrugna...

7.2CVSS6.6AI score0.00373EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-5833

Malware in sbrugna...

7.2CVSS6.6AI score0.0032EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-5830

Malware in sbrugna...

4.9CVSS4.9AI score0.00338EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-5835

Malware in sbrugna...

8.1CVSS8.2AI score0.01049EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-5831

Malware in sbrugna...

7.8CVSS7.5AI score0.01326EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/14 6:36 a.m.•16 views

CVE-2020-18305

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges...

8CVSS5.8AI score0.00703EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/14 6:36 a.m.•36 views

CVE-2020-18305

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges...

8CVSS6.9AI score0.00703EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•1 views

CVE-2020-18305: Improper Authentication

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges...

8CVSS5.7AI score0.00703EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/13 3:43 p.m.•45 views

CVE-2020-18305

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges...

6.9AI score0.00703EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/13 3:43 p.m.•63 views

CVE-2020-18305

Extreme Networks EXOS versions prior to v.22.7 and v.30.2 are vulnerable to a security issue in the Web GUI where the system fails to restrict URL access. This flaw could allow an attacker to access sensitive information or escalate privileges . To remediate this, users should update to version 2...

7.2AI score0.00703EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/13 12:00 a.m.•13 views

PT-2024-10784 · Extreme Networks · Extreme Networks Exos

Name of the Vulnerable Software and Affected Versions: Extreme Networks EXOS versions prior to 22.7 Extreme Networks EXOS versions prior to 30.2 Description: The issue is related to the Web GUI of Extreme Networks EXOS, which fails to restrict URL access. This allows attackers to access sensitive...

8CVSS6.9AI score0.00703EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/11/20 12:00 a.m.•12 views

Extreme Networks EXOS Security Vulnerability

Extreme Networks EXOS is a software or network operating system used in a network switch from Extreme Networks USA. Extreme Networks EXOS has a security vulnerability that originates when an attacker sends a malicious BGP update message packet that can trigger a denial of service...

6.8AI score0.00298EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2023/10/16 8:15 p.m.•5 views

CVE-2023-43119

An Access Control issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server...

9.8CVSS7.3AI score0.00605EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/16 8:15 p.m.•35 views

CVE-2023-43118

Cross Site Request Forgery CSRF vulnerability in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API...

8.8CVSS9AI score0.00273EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/16 8:15 p.m.•32 views

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API...

6.8CVSS8.9AI score0.00273EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/10/16 8:15 p.m.•25 views

Directory traversal

A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to read arbitrary files...

5CVSS7.4AI score0.0098EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/16 12:00 a.m.•72 views

CVE-2023-43118

The CVE-2023-43118 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the Chalet application of Extreme Networks Switch Engine (EXOS). Affected versions are EXOS prior to 32.5.1.5 (also listed as pre-32.5.1.5 in various sources). The underlying issue enables an attacker to execu...

8.8CVSS8.9AI score0.00273EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/16 12:00 a.m.•70 views

CVE-2023-43121

CVE-2023-43121 concerns Extreme Networks Switch Engine (EXOS) Chalet application. A directory traversal flaw in Chalet (root cause: improper handling of file paths) enables reading arbitrary files. Affected EXOS versions are prior to 32.5.1.5, prior to 22.7, and prior to 31.7.2. Impact is read ac...

7.5CVSS7.4AI score0.0098EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/16 12:00 a.m.•1 views

CVE-2023-43120: Improper Privilege Management

An issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request...

8.8CVSS8.2AI score0.00715EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/16 12:00 a.m.•0 views

CVE-2023-43121: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to read arbitrary files...

7.5CVSS7.6AI score0.0098EPSS
SaveExploits0References2
Rows per page
Query Builder