Cisco NX-OS Software 安全漏洞

Cisco NX-OS Software is a set of data center-class operating system software for switches from Cisco, U.S. A denial-of-service vulnerability exists in the implementation of the system login block-for command in Cisco NX-OS Software, which could be exploited by an attacker to log into a process by...

Cisco Nexus 9000 Series Fabric Switches 安全漏洞

Cisco Nexus 9000 Series Fabric Switches is a Cisco 9000 Series fabric switch. The vulnerability can be exploited to read arbitrary files on the file system of the affected device by executing certain commands...

Cisco Nexus 9000 Series Fabric Switches 数据伪造问题漏洞

The Cisco Nexus 9000 Series Fabric Switches is a 9000 Series Fiber Optic Switch from Cisco. The Cisco Nexus 9000 Series Fabric Switches are vulnerable to a data forgery issue that arises from TCP traffic sent to a specific port on an affected device that is not properly sanitized. The vulnerabili...

CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications...

CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications...

CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications...

Design/Logic Flaw

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications...

CVE-2021-37152

Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications...

CVE-2021-37152

CVE-2021-37152 affects Sonatype Nexus Repository Manager 3.x prior to 3.33.0. An authenticated attacker who can add HTML files to a repository could cause cross-site scripting by redirecting users to Nexus pages with modified code. Root cause: improper handling/delivery of HTML content uploaded t...

Sonatype Nexus Repository Manager 跨站脚本漏洞

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. Sonatype Nexus Repository Manager suffers from a cross-site scripting vulnerability that stems from the ability to run JavaScript code in...

Nexus Control Panel Buffer Overflow Vulnerability

Swisslog Healthcare Nexus Panel, a medical device from Swisslog Healthcare, is vulnerable to an integer underflow vulnerability in versions prior to Nexus Control Panel 7.2.5.7. An attacker could use this vulnerability to override the internal queue data structure, which could enable remote code...

Nexus Control Panel Buffer Overflow Vulnerability (CNVD-2021-62180)

Swisslog Healthcare Nexus Panel, a medical device from Swisslog Healthcare, has a security vulnerability in versions prior to Nexus Control Panel 7.2.5.7. The vulnerability can be exploited to override the internal queue data structure, allowing for remote code execution...

HMI3 Control Panel Trust Management Issue Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare.A security vulnerability exists in the HMI3 Control Panel, which stems from an insecure privilege issue in the HMI3 Control Panel of the Swisslog Healthcare Nexus. No details of the vulnerability are currently available...

Nexus Control Panel Buffer Overflow Vulnerability (CNVD-2021-62179)

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare. A buffer overflow vulnerability exists in Nexus Control Panel versions prior to 7.2.5.7. An attacker can exploit this vulnerability by sending a specially crafted message to the HMI to enable remote code execution...

Nexus Control Panel Code Issue Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare. A code download without integrity check vulnerability exists in Nexus Control Panel versions prior to 7.2.5.7. The vulnerability stems from no file validation during the upload of an update. No details of the...

Nexus Control Panel Elevation of Privilege Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare.An elevation of privilege vulnerability exists in versions prior to Nexus Control Panel 7.2.5.7. An attacker could exploit this vulnerability to gain root access to the device, which would allow access to all device...

Nexus Control Panel Out-of-Bounds Writing Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare.An out-of-bounds write vulnerability exists in versions prior to Nexus Control Panel 7.2.5.7. An attacker could exploit this vulnerability to cause a stack buffer overflow...

Nexus Control Panel Licensing Issue Vulnerability

Swisslog Healthcare Nexus Panel, a medical device from Swisslog Healthcare, has a security vulnerability in versions prior to Nexus Control Panel 7.2.5.7. The vulnerability stems from an improper method used to bind a local service to a port on the device interface. An attacker could use this...

Major Hospitals affected by PwnedPiper Vulnerabilities

THREAT LEVEL: White. For a detailed advisory, download the pdf file here. Multiple Zero-day vulnerabilities PwnedPiper have been found affecting the HMI-3 Control Panel of Swisslog Healthcare’s TransLogic Pneumatic Tube Systems PTS. PTS is a specialized system that uses compressor to transport...

Swisslog Healthcare Translogic PTS

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Swisslog Healthcare Equipment: Translogic PTS Pneumatic Tube Systems Vulnerabilities: Use of Hard-coded Password, Execution with Unnecessary Privileges, Improper Authentication, Download of Code without...