1085 matches found
CVE-2026-129358
A cross-site scripting (XSS) vulnerability exists in Linux Foundation Magma up to version 1.9.0 . The flaw is located in the NMS component, specifically within the handleReact function of the nms/server/main/routes.ts file. This issue allows for remote attacks where manipulation of the affected f...
EUVD-2026-125960
A vulnerability was identified in Linux Foundation Magma up to 1.9.0. Impacted is the function handleReact of the file nms/server/main/routes.ts of the component NMS. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available a...
PT-2026-147668
A vulnerability was identified in Linux Foundation Magma up to 1.9.0. Impacted is the function handleReact of the file nms/server/main/routes.ts of the component NMS. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available a...
CVE-2026-129358: Linux Foundation Magma: A vulnerability was identified in Linux Foundation Magma up to 1.9.0
A vulnerability was identified in Linux Foundation Magma up to 1.9.0. Impacted is the function handleReact of the file nms/server/main/routes.ts of the component NMS. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available a...
Enigma NMS < 65.0.0 - Authenticated OS Command Injection
An OS command injection vulnerability in the discoverandmanage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an authenticated attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ipaddress variable within an snmpbrowser action. id:...
CVE-2026-103582
A flaw was found in Apache NMS ActiveMQ. The OpenWire protocol parsing component does not properly validate incoming frame sizes or verify that decoded length fields fit within the received frame. A malicious or compromised broker, or an attacker capable of modifying unencrypted network traffic,...
CVE-2026-103582: Apache Software Foundation Apache ActiveMQ NMS OpenWire Client Library: Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package…
Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ the .NET OpenWire client, package Apache.NMS.ActiveMQ before 2.3.0. The OpenWire unmarshalling code trusted the frame size and the length and count fields read from the network. It did not enforce a maximum frame...
CLEANSTART-2024-CV60973 NETSAS Enigma NMS 65
Security vulnerability affects the elfutils package. NETSAS Enigma NMS 65...
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026
Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution and other security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current...
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for October 2026
Summary IBM SevOne Network Performance Management has addressed PHP Remote Code Execution security vulnerabilities in the NMS component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-109618 DESCRIPTION: PHP uses longjmp for out-of-memory OOM errors to exit the current context an...
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026
Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the NMS component with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security vulnerabilities. IBM SevOne...
Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026
Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the NMS component including Streaming Telemetry with a Service Pack update. The publication of this security bulletin represents a change in our communication process, not an increase in security...
CVE-2026-73440 Security Advisory 0178
On affected platforms running Arista EOS with Simple Network Management Protocol SNMP configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to thi...
CVE-2026-83342
Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and...
Malware in nms-dashboard-js
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in nms-dashboard-js (npm)
Source: amazon-inspector ab87107c47e765b4214ccd31eac720d9d082b0cb5040d8acf90c8af00db5a601 [email protected] declares an npm install lifecycle hook scripts.install: "node index.js" that unconditionally requires ./lib/core inside a swallow-all try/catch. The loaded code reads...
Malicious code in nms-dashboard-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab87107c47e765b4214ccd31eac720d9d082b0cb5040d8acf90c8af00db5a601 [email protected] declares an npm install lifecycle hook scripts.install: "node index.js" that unconditionally requires ./lib/core inside a...
MAL-2026-13451 Malicious code in nms-dashboard-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab87107c47e765b4214ccd31eac720d9d082b0cb5040d8acf90c8af00db5a601 [email protected] declares an npm install lifecycle hook scripts.install: "node index.js" that unconditionally requires ./lib/core inside a...
SevOne NMS Network Manager Detection
Detects SevOne NMS Network Manager. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SevOne NMS Network Manager.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SevOne NMS Network Manager Detection', 'description...
Enigma NMS - Detection
Detects Enigma NMS - Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Enigma NMS - Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Enigma NMS - Detection', 'description': 'Detects Enigma NMS...