Astra Linux – Vulnerability in net-snmp

The handleipv6IpForwarding function in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP version 5.4.3 to 5.9.3 has a NULL Pointer Exception bug. This bug can be exploited by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a Denial of Service attack...

NETAMS WNAM User Management Authentication Bypass

The vulnerability of NETAMS WNAM wireless network user management software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to the system’s web interface with administrator privilege...

SINEC INS Privilege Escalation

The vulnerability of the SINEC INS network infrastructure management software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

SINEC INS Network Management SINEC INS Network Management

The vulnerability of the endpoint /api/sftp/uploadFiles in the SINEC INS network management software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with system user privileges...

SINEC INS Network Path Traversal Unauthorized Access

The vulnerability of the SINEC INS network infrastructure management software is related to deficiencies in checking the path name when processing the final endpoint /api/sftp/uploadFiles. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

QNAP Systems QuNetSwitch 操作系统命令注入漏洞

QNAP Systems QuNetSwitch is a network management software developed by QNAP Systems, a company based in Taiwan, China. It provides centralized switch management and network configuration monitoring capabilities. Previous versions of QNAP Systems QuNetSwitch, including 2.0.4.0415, had a...

D-Link Nuclias Connect 安全漏洞

D-Link Nuclias Connect is a network management software from D-Link for centralized management of wireless access points APs, supporting multi-device remote control and reporting capabilities. An observable response difference vulnerability exists in D-Link Nuclias Connect that stems from an...

EUVD-2019-10476

Malware in sbrugna...

Advantech iView Cross-Site Scripting Vulnerability (CNVD-2025-17826)

Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. A cross-site scripting vulnerability exists in Advantech iView due to improper validation of user-supplied input. An attacker could use this vulnerability to execute...

SINEC INS Log Size DoS

The vulnerability of the SINEC INS network infrastructure management software is related to insufficient control over the size of the log files created. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Cisco Secure Firewall Management Center Code Execution

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Brocade SANnav Operational Information Disclosure

The vulnerability of the Brocade SANnav network management software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the database structure and its contents...

Ivanti Endpoint Manager GetRulesetsSQL Code Execution

The vulnerability of the GetRulesetsSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

Brocade SANnav Unauthorized Access

The vulnerability of the Brocade SANnav network management software is related to the use of strictly encrypted credentials. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Brocade SANnav Privilege Escalation

The vulnerability of the SAN management software for Brocade SANnav lies in the existence of an undocumented user named “sannav”. Exploiting this vulnerability can allow a hacker to enhance their privileges...

Inter-Device Communication component of Privilege Escalation

The vulnerability of the Inter-Device Communication component of Cisco Firepower Threat Defense’s microprogramming-based network interface controllers, as well as the Cisco Firepower Management Center’s network management software, is related to improper code generation. Exploiting this...

Cisco Firepower Management Center XSS

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Zyxel CloudCNM SecuManager Hardcoding Vulnerability

Zyxel ZyXEL CloudCNM SecuManager is a set of network management software from Zyxel, Taiwan, China. Zyxel CloudCNM SecuManager ejabberd has a hard-coded vulnerability that can be exploited by remote attackers to submit special requests for unauthorized access to the application system...

Zyxel CloudCNM SecuManager 安全漏洞

Zyxel ZyXEL CloudCNM SecuManager is a network management software from Zyxel, Taiwan, China. requests to gain unauthorized access to the system...

Cisco IOS XE SD-WAN Software和Cisco SD-WAN 输入验证错误漏洞

Cisco IOS XE SD-WAN Software and Cisco SD-WAN are both products of Cisco U.S.A. Cisco IOS XE SD-WAN Software is a software for network management software-defined networking applied to the Cisco IOS XE network operating system. The Cisco IOS XE SD-WAN and Cisco SD-WAN are vulnerable to a path...