Lucene search
K

341 matches found

Cvelist
Cvelist
added 2021/09/30 5:12 p.m.14 views

CVE-2021-35204

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

5.6AI score0.00354EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.1 views

Netscout NgeniusOne 安全漏洞

nGeniusONE is a service assurance solution provided by NETSCOUT that provides full visibility into infrastructure, interdependencies, and applications. nGeniusONE version 6.3.0 build 1196 contains an authorization bypass vulnerability in FDSQueryService. An attacker could exploit this vulnerabili...

4.3CVSS5.3AI score0.00138EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.1 views

Netscout NgeniusOne 安全漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. Netscaut nGeniusONE in version 6.3.0 build 1196 suffers from an arbitrary file read vulnerability, which arises from incorrect user access control on a network system or product, and...

5.7CVSS6.2AI score0.00405EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.1 views

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1004 and earlier, which stems from a lack of validation of user input and filtering of input...

5.4CVSS5.3AI score0.00354EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.1 views

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of validation of user input data and filtering of...

4.8CVSS5AI score0.00364EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.1 views

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE version 6.3.0 build 1196, which stems from a lack of validation of user input and filtering of input data at the...

5.4CVSS5.8AI score0.00354EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.1 views

Netscout NgeniusOne 输入验证错误漏洞

Netscaut nGeniusONE is a network performance management appliance from Netscout, Inc. with a next-generation Deep Packet Inspection DPI engine that enables fast, real-time, context-sensitive business, network, and application performance analysis of large amounts of data. nGeniusONE is vulnerable...

5.4CVSS5.7AI score0.0021EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.1 views

Netscout NgeniusOne 代码问题漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. Netscaut nGeniusONE in version 6.3.0 build 1196 suffers from an XML External Entity Injection vulnerability, which arises from a network system or product that does not have the correc...

6.5CVSS6.7AI score0.00407EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/09/30 12:0 a.m.3 views

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of user input validation and filtering of input data...

5.4CVSS5.3AI score0.00354EPSS
Exploits0References2
Malwarebytes
Malwarebytes
added 2021/04/15 5:17 p.m.53 views

“Huge upsurge” in DDoS attacks during pandemic

Researchers at Netscout have released a report analyzing the malicious internet traffic of 2020 and comparing it to the years before. Some of the results were as expected: Brute-forcing credentials and more targeting towards internet-connected devices were foreseeable and have been discussed at...

Exploits0
The Hacker News
The Hacker News
added 2021/02/06 7:28 a.m.69 views

Cybercriminals Now Using Plex Media Servers to Amplify DDoS Attacks

A new distributed denial-of-service attack DDoS vector has ensnared Plex Media Server systems to amplify malicious traffic against targets to take them offline. "Plex's startup processes unintentionally expose a Plex UPnP-enabled service registration responder to the general Internet, where it ca...

2.4AI score
Exploits0
NVD
NVD
added 2020/12/03 5:15 p.m.8 views

CVE-2020-28251

NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must...

9.3CVSS8.2AI score0.00549EPSS
Exploits0References2
Prion
Prion
added 2020/12/03 5:15 p.m.10 views

Command injection

NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must...

9.3CVSS8.1AI score0.00549EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/12/03 4:47 p.m.11 views

CVE-2020-28251

NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The attacker must...

8.2AI score0.00549EPSS
Exploits0References2
CVE
CVE
added 2020/12/03 4:47 p.m.42 views

CVE-2020-28251

CVE-2020-28251 affects NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier. The vulnerability enables a user to escalate privileges on a sensor, gaining administrative access to the sensor and root access to the operating system. The attacker reportedly must complete a password-cracking ...

9.3CVSS8.1AI score0.00549EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2020/12/03 12:0 a.m.2 views

Netscout AirMagnet Survey Permission License and Access Control Issues Vulnerability

Netscout AirMagnet Survey is a wireless site survey software from Netscout USA. The software can be used for real-world survey data collection and hypothetical scenario simulation, 802.11ac site surveys, 802.11n site surveys, validation of user and application requirements, unique RF spectrum and...

9.3CVSS7.2AI score0.00549EPSS
Exploits0References3
HackRead
HackRead
added 2018/05/03 1:48 p.m.13 views

Anti-theft software LoJack hijacked by Russian Fancy Bear group

By Waqas Security researchers at Netscout's Arbor Networks’ Security Engineering & Response This is a post from HackRead.com Read the original post: Anti-theft software LoJack hijacked by Russian Fancy Bear group...

2.6AI score
Exploits0
NVD
NVD
added 2009/04/10 10:0 p.m.10 views

CVE-2008-6701

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

7.5CVSS6.9AI score0.00585EPSS
Exploits0References4
Prion
Prion
added 2009/04/10 10:0 p.m.8 views

Design/Logic Flaw

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

7.5CVSS7.5AI score0.00585EPSS
Exploits0References4Affected Software2
Cvelist
Cvelist
added 2009/04/10 3:0 p.m.15 views

CVE-2008-6701

NetScout formerly Network General Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/enUS/domains/adddomain.jsp, which allows remote attackers to gain administrator privileges via a direct request...

6.9AI score0.00585EPSS
Exploits0References4
Rows per page
Query Builder