SUSE CVE-2014-9870

The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly consider user-space access to the TPIDRURW register, which allows local users to gain privileges via a crafted application, aka Android internal bug 28749743 and...

SUSE CVE-2014-9900

The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android...

SUSE CVE-2017-16669

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

SUSE CVE-2019-9630

Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images...

SUSE CVE-2019-9629

Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults fixed credentials...

SUSE CVE-2019-14905

A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxosfilecopy module can be used to copy files to a flash or bootflash on NXOS devices. Malicious code could craft the filename parameter to perform OS...

The vulnerability of Sonatype Nexus Repository Manager lies in the lack of measures to clean input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of Sonatype Nexus Repository Manager is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

New BOLDMOVE Backdoor uses FortiOS vulnerability for initial access

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A suspected China-nexus campaign has exploited a vulnerability in Fortinets FortiOS SSL-VPN, known as CVE-2022-42475. The exploitation was believed to have occurred as early as October 2022 and the targe...

PT-2023-13551 · Unknown · Jetnexus/Edgenexus Adc

Name of the Vulnerable Software and Affected Versions: JetNexus/EdgeNexus ADC version 4.2.8 Description: A Cross-Site Request Forgery CSRF issue in the management portal allows attackers to escalate privileges and execute arbitrary code via unspecified vectors. Recommendations: For...

CVE-2018-25062

A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrmdumppolicydone of the file net/xfrm/xfrmuser.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this...

CVE-2018-25062

A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrmdumppolicydone of the file net/xfrm/xfrmuser.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this...

Design/Logic Flaw

A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrmdumppolicydone of the file net/xfrm/xfrmuser.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this...

CVE-2018-25062

CVE-2018-25062 affects flar2 ElementalX up to 6.x on Nexus 9. The issue is in the ipsec component, specifically the function xfrm_dump_policy_done in net/xfrm/xfrm_user.c, whose manipulation can cause a denial of service. A fix is available: upgrade to ElementalX 7.00 (patch 1df72c9f0f61304437f4f...

CVE-2018-25062 flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service

A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrmdumppolicydone of the file net/xfrm/xfrmuser.c of the component ipsec. The manipulation leads to denial of service. Upgrading to version 7.00 is able to address this...

ElementalX-N9 安全漏洞

ElementalX-N9 is an ElementalX kernel for the Nexus 9 by the individual developer Aaron Segaert. A security vulnerability exists in ElementalX-N9 version 6.x and prior versions. An attacker exploited the vulnerability to cause a denial of service on the system...

The vulnerability of the web interface of the Cisco Nexus Insights system, which is used for automating, monitoring, and analyzing the switching structure of data centers, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the Cisco Nexus Insights system, which is used for automating, tracking, and analyzing the switching structure of data centers, is related to the use of files and directories accessible to external parties when RBAC-based access control filters are applie...

PT-2022-6709 · Cisco · Cisco Nexus 9000 Series Fabric Switches +3

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 9000 Series Fabric Switches in ACI mode affected versions not specified Cisco Nexus series 9332C, 9364C, and 9500 affected versions not specified Description: The issue is related to an incorrect implementation of the ciphers used...

多款Cisco产品安全漏洞

Cisco IOS and others are products of Cisco USA.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XR is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system.Cisco IOS XE Software is an operating system.Cisco IOS...

The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud network management, allows a attacker to re-write any files.

The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management involves insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to re-write any files on the vulnerable devic...

The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems allows a perpetrator to execute arbitrary code with root privileges or cause a service failure.

The vulnerability of the Cisco Discovery protocol’s implementation in NX-OS and FXOS operating systems relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code with root privileges or cause service failures...