Nedi Consulting NeDi 操作系统命令注入漏洞

NeDi is an open source software tool that discovers, maps and inventories network devices and tracks connected end nodes. NeDi 1.9C suffers from an OS command injection vulnerability. The vulnerability can be exploited to execute OS commands in the Nodes Traffic function of endpoint...

The vulnerability of the SNMPv3 implementation of the micro-programming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage allows a attacker to cause service interruptions.

The vulnerability of the SNMPv3 implementation of the micro-programming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage exists due to...

SINEC NMS 路径遍历漏洞

Siemens SINE CNMS is the new generation of network management system Enterprise for digital libraries. This system can be used to centrally monitor, manage and configure networks.Siemens SINEMA Server is Siemens' network monitoring and management software for industrial Ethernet. A directory...

Cisco IOS XR 安全漏洞

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. A vulnerability exists in the Cisco IOS XR software in the SNMP Management Panel with Access Control Error vulnerability. The vulnerability is due to incorrect LPTS programming when...

PT-2021-1919 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to insufficient access control in the Local Packet Transport Services LPTS component of the SNMP protocol in Cisco IOS XR Software. This could allow a...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the Cisco DNA Center’s network management system allows a attacker to perform cross-site scripting attacks.

The vulnerability in the Cisco DNA Center network management web interface relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Cisco DNA Center Bug Opens Enterprises to Remote Attack

A cross-site request forgery CSRF vulnerability in the Cisco Digital Network Architecture DNA Center could open enterprise users to remote attack and takeover. The flaw, tracked as CVE-2021-1257, exists in the web-based management interface of the Cisco DNA Center, which is a centralized...

Huawei CampusInsight and ManageOne Environmental Issues Vulnerability

Huawei ManageOne is a cloud data center management solution, Huawei CampusInsight is a campus network management system, Huawei CampusInsight and ManageOne have security vulnerabilities that could be exploited by attackers to cause information leakage...

Cisco SD-WAN vMange Command Injection Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. A command injection vulnerability exists in Cisco SD-WAN vMange. The vulnerability stems from the program not properly validating user input...

CVE-2021-3130

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible...

CVE-2021-3130

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible...

PT-2021-1860 · Cisco · Cisco Sd-Wan Vsmart Controller +5

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vBond Orchestrator versions affected versions not specified Cisco SD-WAN vEdge Cloud Routers versions affected versions not specified Cisco SD-WAN vEdge Routers versions affected versions not specified Cisco SD-WAN vSmart...

Cisco SD-WAN 输入验证错误漏洞

Cisco SD-WAN vEdge is a router from Cisco. Cisco SD-WAN vManage is a software that provides software-defined networking capabilities from Cisco. The software provides a way to virtualize the network. A buffer overflow vulnerability exists in several Cisco SD-WAN products. The vulnerability stems...

CVE-2021-0220

The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser for example via XSS or access cached contents may be able to obtain a copy of...

Design/Logic Flaw

The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser for example via XSS or access cached contents may be able to obtain a copy of...

CVE-2021-0220

CVE-2021-0220 (Juniper Junos Space) affects Junos Space versions prior to 20.3R1. The issue is that shared secrets are stored in a recoverable format and can be exposed through the UI. An attacker who can run arbitrary code in the victim’s browser (e.g., via XSS) or access cached contents may obt...

Command Execution Vulnerability in Ruijie Networks-EWEB Network Management System

Ltd. is an ICT infrastructure and industry solutions provider, with the main business of research, development, design and sales of network equipment, network security products and cloud desktop solutions. A command execution vulnerability exists in the Ruijie Networks-EWEB network management...

IBM MQ Appliance Buffer Overflow Vulnerability (CNVD-2021-03003)

The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM USA. The IBM MQ Appliance suffers from a buffer overflow vulnerability that can be exploited by a remote attacker who can send a specially designed SNMP query to cause the...

IBM MQ Appliance 缓冲区错误漏洞

The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM USA. The IBM MQ Appliance suffers from a buffer overflow vulnerability that can be exploited by a remote attacker who can send a specially designed SNMP query to cause the...