Lucene search
K

15 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/21 12:0 a.m.3 views

F5 Networks BIG-IP : iControl REST and tmsh vulnerability (K000161022)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.2 / 17.5.1.6 / 21.0.0.2. It is, therefore, affected by a vulnerability as referenced in the K000161022 advisory. Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell tmsh network...

7.1CVSS5.9AI score0.00051EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/13 6:30 p.m.4 views

EUVD-2026-29992

Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell tmsh network diagnostics commands and in BIG-IP iControl REST. These vulnerabilities may allow an authenticated attacker to view the network status of destination systems. Note: Software versions which have...

7.1CVSS5.8AI score0.00051EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/13 6:30 p.m.2 views

EUVD-2026-29975

Incorrect permission assignment vulnerabilities exist in iControl REST and TMOS shell tmsh undisclosed command which may allow an authenticated attacker to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.1CVSS5.8AI score0.00063EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/13 2:12 p.m.4 views

CVE-2026-42408 BIG-IP DNS tmsh vulnerability

When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell tmsh command that may allow a highly privileged authenticated attacker to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

6.7CVSS5.8AI score0.00012EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/15 1:55 p.m.4 views

CVE-2025-61958 BIG-IP TMSH vulnerability

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell. For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a...

8.7CVSS0.00061EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-10275

Malware in sbrugna...

9.9CVSS9.3AI score0.01449EPSS
Exploits1References2
Microsoft KB
Microsoft KB
added 2025/08/12 7:0 a.m.5 views

Description of the security update for SharePoint Server 2019 Language Pack: August 12, 2025 (KB5002770)

Description of the security update for SharePoint Server 2019 Language Pack: August 12, 2025 KB5002770 Summary This security update resolves a Microsoft Word remote code execution vulnerability and Microsoft Word information disclosure vulnerability. To learn more about the vulnerabilities, see t...

8.4CVSS6.7AI score0.00646EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/08/02 12:0 a.m.3 views

PT-2023-24981 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions affected versions not specified Description: The issue concerns F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards, which generate a deterministic password for the Crypto User account. This predictable password allows an...

6.1CVSS6.1AI score0.00085EPSS
Exploits0References3
Prion
Prion
added 2023/03/23 5:15 p.m.13 views

Input validation

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to insufficient input validation by the system CLI. An attacker with privileges to run commands could exploit...

4.3CVSS7.9AI score0.00054EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/05/03 12:0 a.m.2 views

PT-2019-18197 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 11.5.2 through 11.5.8 BIG-IP versions 11.6.1 through 11.6.3.4 BIG-IP versions 12.1.0 through 12.1.4 BIG-IP versions 13.0.0 through 13.1.1.4 BIG-IP versions 14.0.0 through 14.1.0.1 Description: The issue allows Administrator an...

4.9CVSS5AI score0.00273EPSS
Exploits0References3
OSV
OSV
added 2018/12/17 7:29 p.m.1 views

CVE-2018-18555

A sandbox escape issue was discovered in VyOS 1.1.8. It provides a restricted management shell for operator users to administer the device. By issuing various shell special characters with certain commands, an authenticated operator user can break out of the management shell and gain access to th...

9.9CVSS5.9AI score
Exploits0References1
CVE
CVE
added 2018/12/17 6:0 p.m.44 views

CVE-2018-18555

CVE-2018-18555 affects VyOS 1.1.8, where the restricted management shell for operator users can be escaped by issuing shell special characters, allowing an authenticated operator to break out to the underlying Linux shell and execute arbitrary OS commands with the user’s privileges. Documents con...

9.9CVSS9.4AI score0.01449EPSS
Exploits1References1Affected Software1
0day.today
0day.today
added 2017/10/25 12:0 a.m.38 views

Infoblox NetMRI VM-AD30-5C6CE Factory Reset Persistence Vulnerability

Exploit for hardware platform in category remote exploits Title: Infoblox NetMRI Administration Shell Factory Reset Persistence Advisory ID: KL-001-2017-018 Publication Date: 2017.10.24 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2017-018.txt 1. Vulnerability Details...

6.7AI score
Exploits0
F5 Networks
F5 Networks
added 2016/08/29 12:0 a.m.40 views

SOL06045217 - TMM vulnerability CVE-2016-5022

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

9.8CVSS2.4AI score0.03073EPSS
Exploits0References6
F5 Networks
F5 Networks
added 2014/12/23 12:0 a.m.102 views

SOL15935 - NTP vulnerability CVE-2014-9294

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

7.5CVSS0.6AI score0.33271EPSS
Exploits1References5
Rows per page
Query Builder