Lucene search
+L

214 matches found

RedhatCVE
RedhatCVE
•added 2026/02/06 1:30 p.m.•31 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/05 8:16 a.m.•22 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS0.00263EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/05 8:16 a.m.•15 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.8AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/05 7:13 a.m.•45 views

CVE-2025-10258 A time-based SQL Injection vulnerability in Infinera DNA

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

0.00263EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/05 7:13 a.m.•46 views

CVE-2025-10258

Infinera DNA , a network management system, is susceptible to a time-based SQL injection vulnerability. The root cause is insufficient input validation and a lack of proper sanitization of user-supplied data, which allows for the manipulation of database queries. This flaw may result in the leaki...

6.3CVSS5.8AI score0.00263EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/02/05 7:13 a.m.•9 views

CVE-2025-10258

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/05 7:13 a.m.•9 views

CVE-2025-10258 A time-based SQL Injection vulnerability in Infinera DNA

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

5.8AI score0.00263EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/05 7:13 a.m.•11 views

EUVD-2025-206874

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.6AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/05 12:00 a.m.•29 views

PT-2026-5869

Name of the Vulnerable Software and Affected Versions Infinera DNA affected versions not specified Description Infinera DNA is susceptible to a time-based SQL injection due to inadequate input validation. This flaw could lead to the disclosure of sensitive information. The vulnerability involves...

6.3CVSS5.7AI score0.00263EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/05 12:00 a.m.•1 views

CVE-2025-10258: Improper Neutralization of Special Elements used in an SQL Command

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information...

6.3CVSS5.8AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/05 12:00 a.m.•19 views

Infinera DNA 安全漏洞

Infinera DNA is a network management system developed by the American company Infinera. There is a security vulnerability in Infinera DNA, which stems from insufficient input validation, potentially leading to the exposure of sensitive information...

6.3CVSS5.8AI score0.00263EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 6:13 p.m.•16 views

CVE-2025-26489

Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

6.5CVSS6.8AI score0.00332EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 9:33 a.m.•28 views

CVE-2025-26488

Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus causing a DoS condition, via crafted XML payloads.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

7.5CVSS7AI score0.00378EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 9:33 a.m.•23 views

CVE-2025-26487

Server-Side Request Forgery SSRF vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests through the appliance used as a bridge...

8.6CVSS7.2AI score0.00347EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 9:33 a.m.•14 views

CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.8AI score0.00502EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/09 9:33 a.m.•22 views

CVE-2025-27019

Remote shell service RSH in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS6.9AI score0.00426EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/08 10:16 a.m.•16 views

CVE-2025-27019

Remote shell service RSH in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.1AI score0.00426EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/08 10:16 a.m.•14 views

CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS7.6AI score0.00502EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/08 10:16 a.m.•15 views

CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS0.00502EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/08 10:16 a.m.•18 views

CVE-2025-27019

Remote shell service RSH in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell.This issue affects MTC-9: from R22.1.1.0275 before R23.0...

9.8CVSS0.00426EPSS
SaveExploits0References1
Rows per page
Query Builder