5448 matches found
PT-2024-9239 · Abb · Abb Aspect Matrix Series +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT Enterprise version 3.08.02 ABB ASPECT NEXUS Series version 3.08.02 ABB ASPECT MATRIX Series version 3.08.02 Description: The issue is related to a default credential vulnerability, which can be exploited by an attacker to gain...
PT-2024-9193 · Abb · Abb Aspect +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: Cross Site Scripting vulnerabilities were found, providing a potential for malicious scripts to be injected into a client browser...
PT-2024-9200 · Abb · Abb Aspect +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: Cross Site Request Forgery vulnerabilities were found, providing a potential for exposing sensitive information or changing system...
PT-2024-9184 · Abb · Abb Aspect +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: The issue is related to Local File Inclusion vulnerabilities, which allow access to sensitive system information. This is due to...
PT-2024-9183 · Abb · Abb Aspect +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: Information Disclosure vulnerabilities allow access to application configuration information. The issue is related to errors in...
PT-2024-9204 · Abb · Abb Aspect +2
Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: The issue is related to incorrect code generation management in the firmware of embedded network controllers for building...
Cisco NX-OS Exposure of Resource to Wrong Sphere (CVE-2017-12351)
A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the scope of the guest shell container. An attacker would need valid administrator credentials to perform this attack. The vulnerability is due t...
Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2016-1341)
Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...
Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 Denial of Service (CVE-2012-2469)
Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability HA policy is configured for Reset, allows remote attackers to cause a denial of service device reset via a malformed Cisco Discovery Protocol CDP packet, aka Bug IDs CSCtk34535 and CSCtk19132. This plugin...
Cisco NX-OS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2012-1357)
The igmpsnooporibfillsourceupdate function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service device reload via IGMP packets, aka Bug ID CSCts46521. This plugin only works with Tenable.ot. Please visit...
Cisco NX-OS 5.2 and 6.1 Denial of Service (CVE-2012-3051)
Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service process crash or packet loss via a large number of ARP packets, aka Bug ID CSCtr44822. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...
Cisco NX-OS Resource Management Errors (CVE-2012-6396)
Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service memory consumption via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID...
Cisco NX-OS Resource Management Errors (CVE-2012-0352)
Cisco NX-OS 4.2.x before 4.2%281%29SV1%285.1%29 on Nexus 1000v series switches; 4.x and 5.0.x before 5.0%282%29N1%281%29 on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of...
Cisco NX-OS Exposure of Resource to Wrong Sphere (CVE-2017-12342)
A vulnerability in the Open Agent Container OAC feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to read and send packets outside the scope of the OAC. The vulnerability is due to insufficient internal security measures in the OAC feature. An attacker could...
Cisco Nexus 3000 and 5000 Permissions, Privileges, and Access Controls (CVE-2011-2581)
The ACL implementation in Cisco NX-OS 5.02 and 5.03 before 5.03N21 on Nexus 5000 series switches, and NX-OS before 5.03U12a on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in...
Cisco NX-OS Double Free (CVE-2018-0102)
A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability exists because the affected software attempts to free the same area of memory twice...
Cisco NX-OS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2016-1453)
Buffer overflow in the Overlay Transport Virtualization OTV GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701. This plugin only works with Tenable.ot. Please vis...
Cisco NX-OS Command Injection (CVE-2017-12329)
A vulnerability in the CLI of Cisco Firepower Extensible Operating System FXOS and NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacke...
Google Pixel 安全漏洞
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 for Google Pixel/Nexus devices, which can be...
Google Pixel 安全漏洞
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 for Google Pixel/Nexus devices, which can be...