Lucene search
+L

6346 matches found

Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•10 views

PT-2025-34896 · Cisco · Cisco Nexus Dashboard

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard affected versions not specified Description: A vulnerability exists in the backup restore functionality of Cisco Nexus Dashboard that could allow an authenticated, remote attacker to conduct a path traversal attack. This...

6.5CVSS6.2AI score0.0059EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•13 views

PT-2025-34890 · Cisco · Cisco Nx-Os

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an...

4.4CVSS6.7AI score0.03166EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•5 views

CVE-2025-20347: Protection Mechanism Failure

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

5.4CVSS5.9AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•27 views

PT-2025-34888 · Cisco · Cisco Nexus 3000 Series Switches +1

Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 Series Switches Cisco Nexus 9000 Series Switches Description: A vulnerability in the Protocol Independent Multicast Version 6 PIM6 feature could allow an authenticated, low-privileged, remote attacker to trigger a crash of th...

5CVSS6.6AI score0.00352EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•19 views

PT-2025-34887

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches Description A vulnerability exists in the Intermediate System-to-Intermediate System IS-IS feature. An unauthenticated, adjacent attacker could...

7.4CVSS6.6AI score0.00278EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•15 views

Cisco NX-OS Software Sensitive Log Information Disclosure (cisco-sa-nxos-infodis-TEcTYSFG)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabric Interconnects, Cisco...

5.5CVSS5.5AI score0.00137EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•17 views

Cisco NX-OS Software 信息泄露漏洞

Cisco NX-OS Software is a suite of data center-grade operating system software used by Cisco's switches. An information disclosure vulnerability exists in Cisco NX-OS Software that originates from improper logging of sensitive information and could lead to information disclosure...

5.5CVSS5.8AI score0.00137EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•18 views

Cisco Nexus Dashboard 路径遍历漏洞

Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A path traversal vulnerability exists in Cisco Nexus Dashboard, which stems from insufficient validation of backup file content and could lead to a path traversal attac...

7.2CVSS6.4AI score0.0059EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•9 views

Cisco NX-OS Software 操作系统命令注入漏洞

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. Cisco NX-OS Software suffers from an operating system command injection vulnerability that stems from insufficient user input validation, which can be exploited by an...

4.4CVSS5.8AI score0.03166EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•4 views

CVE-2025-20344: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the backup restore functionality of Cisco Nexus Dashboard could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. This vulnerability is due to insufficient validation of the contents of a backup file. An attacker with valid...

7.2CVSS5.9AI score0.0059EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•9 views

CVE-2025-20262: NULL Pointer Dereference

A vulnerability in the Protocol Independent Multicast Version 6 PIM6 feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denia...

5CVSS5.9AI score0.00352EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/27 12:00 a.m.•3 views

CVE-2025-20348: Insertion of Sensitive Information Into Sent Data

A vulnerability in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, low-privileged, remote attacker to view sensitive information or upload and modify files on an affected device. This vulnerability exists because of...

5CVSS5.9AI score0.00299EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/27 12:00 a.m.•21 views

PT-2025-34898 · Cisco · Cisco Nexus Dashboard +1

Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC affected versions not specified Description: A vulnerability exists in the REST API endpoints of Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller NDFC. Th...

5CVSS6.1AI score0.00299EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•16 views

Cisco Nexus Dashboard和Cisco Nexus Dashboard Fabric Controller 安全漏洞

Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller are both products of Cisco, Inc.Cisco Nexus Dashboard is a single console. Cisco Nexus Dashboard is a single console that simplifies the operation and management of data center networks.Cisco Nexus Dashboard Fabric Controller is a...

5CVSS6AI score0.00299EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2025/08/25 6:11 p.m.•20 views

UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats

A China-nexus threat actor known as UNC6384 has been attributed to a set of attacks targeting diplomats in Southeast Asia and other entities across the globe to advance Beijing's strategic interests. "This multi-stage attack chain leverages advanced social engineering including valid code signing...

7.6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2014-9892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sndcomprtstamp function in sound/core/compressoffload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices,...

5.5CVSS6.8AI score0.00499EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2014-0792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to...

7.5CVSS6.3AI score0.03049EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/18 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2014-9900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ethtoolgetwol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not...

5.5CVSS6.5AI score0.00523EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in nexus-ui-plugin (npm)

The package nexus-ui-plugin was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•4 views

Malicious code in test-mlw2-nexus-vuggy (npm)

The package test-mlw2-nexus-vuggy was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder