CVE-2026-36848

CVE-2026-36848 在 Gigamon-VUE OS（GVOS）设备的 8089 端口上的基于 Web 的管理引擎中发现了一个严重的路径遍历漏洞。该漏洞存在于 persistd 守护进程的旧版 H-VUE 子系统中，允许拥有网络访问权限的未授权远程攻击者以 root 权限读取任意文件并执行部分写操作（无法覆盖已有文件）。 1. 漏洞概述 CVE ID: CVE-2026-36848 目标端口: 8089（TornadoHTTP Web 应用程序） 受影响组件: /opt/tms/persistdpy/persistd.py 漏洞类型: 路径遍历（CWE-22） 影响:...

EUVD-2026-40170

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem...

CVE-2026-36848

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem...

CVE-2026-36848

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem...

CVE-2026-36848

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem...

CVE-2026-36848

Gigamon GVOS v5.16.1 and earlier is affected by a Directory Traversal in the H-VUE subsystem. The root cause is in the legacy persistd web service (port 8089) of GVOS, where DownloadDbFile and UploadDbFile handlers mishandle user-supplied paths, enabling arbitrary file read/write outside the GVOS...

PT-2026-53654

Name of the Vulnerable Software and Affected Versions Gigamon GVOS versions prior to 5.16.2 Description The GVOS H-VUE subsystem contains a directory traversal flaw, which allows an attacker to access files and directories outside the intended folder. Recommendations Update Gigamon GVOS to versio...

EUVD-2020-4566

Malware in sbrugna...

EUVD-2020-4565

Malware in sbrugna...

Gigamon GigaVUE-OS 跨站脚本漏洞

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon Corporation, USA. A security vulnerability exists in Gigamon GigaVUE-OS version 5.0 202, which stems from a discovery containing a Reflective Cross-Site Scripting XSS vulnerability. An attacker could exploit the...

Gigamon GigaVUE-OS Encryption Issue Vulnerability

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon, USA. A security vulnerability exists in GigaVUE-OS GVOS 5.4 - 5.9 that stems from the use of a weak algorithm for hashing stored in an internal database. No details of the vulnerability are available at this time...

Gigamon GigaVUE-OS database plaintext storage redis password vulnerability

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon, USA. A security vulnerability exists in GigaVUE-OS GVOS versions 5.4 - 5.9, which originates from Redis database passwords stored in clear text. An attacker could use this vulnerability to obtain the database...

Gigamon GigaVUE-OS 加密问题漏洞

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon, USA. A security vulnerability exists in GigaVUE-OS GVOS 5.4 - 5.9 that stems from the use of a weak algorithm for hashing stored in an internal database. No details of the vulnerability are available at this time...

Gigamon GigaVUE Code Issue Vulnerability

Gigamon GigaVUE is a set of network monitoring solutions from Gigamon, USA. The product supports features such as network traffic monitoring and sensitive data obfuscation. A security vulnerability exists in the upload function of Gigamon GigaVUE version 5.5.01.11. A remote attacker can exploit t...

Gigamon GigaVUE Path Traversal Vulnerability

Gigamon GigaVUE is a set of network monitoring solutions from Gigamon, USA. The product supports features such as network traffic monitoring and sensitive data obfuscation. A path traversal vulnerability exists in the upload function in Gigamon GigaVUE version 5.5.01.11. An attacker can exploit...

Gigamon GigaVUE 5.5.01.11 Directory Traversal / File Upload Vulnerabilities

Gigamon GigaVUE version 5.5.01.11 suffers from directory traversal and file upload with command execution vulnerabilities. Gigamon has chosen to sunset this product and not offer a patch. Gigamon GigaVUE 5.5.01.11 Directory Traversal / File Upload Vulnerabilities An issue was discovered in Gigamo...

CVE-2020-12252

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter...

CVE-2020-12252

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter...

CVE-2020-12251

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value in the POST method from the original filename to achieve directory traversal via a ../ sequence and, for example, obtain a complete directory listing of the...

CVE-2020-12251

An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value in the POST method from the original filename to achieve directory traversal via a ../ sequence and, for example, obtain a complete directory listing of the...