SevOne Network Management System SQL注入漏洞

SevOne Network Management System is the most comprehensive, scalable and application-centric network performance monitoring system for modern NetOps from SevOne, Inc. inclusive versions contain a SQL injection vulnerability that can be exploited by remote attackers to compromise alert summaries...

SevOne Network Management System 命令注入漏洞

SevOne Network Management System is the most comprehensive, scalable and application-centric network performance monitoring system for modern NetOps from SevOne, Inc. inclusive versions contain a command injection vulnerability that can be exploited by remote attackers to cause privilege escalati...

CVE-2020-36531 SevOne Network Management System Device Manager Page injection

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely...

CVE-2020-36530 SevOne Network Management System Alert Summary sql injection

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely...

CVE-2020-36530 SevOne Network Management System Alert Summary sql injection

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely...

CVE-2020-36530

The CVE-2020-36530 entry concerns SevOne Network Management System (vulnerable up to 5.7.2.22) with a SQL injection affecting the Alert Summary. The vulnerability arises from a manipulation that leads to SQL injection, and exploitation is possible remotely. Connected documents indicate a PoC is a...

CVE-2020-36529

SevOne Network Management System (up to 5.7.2.22) contains a command-injection vulnerability in traceroute.php of the Traceroute Handler. The issue allows remote attackers to achieve privilege escalation through a crafted input, enabling arbitrary command execution. Public references describe rem...

CVE-2020-36529 SevOne Network Management System Traceroute traceroute.php command injection

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely...

CVE-2020-36529 SevOne Network Management System Traceroute traceroute.php command injection

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely...

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE-based Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers allows a attacker to cause service interruptions.

The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco IOS XE Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to...

ARCHIBUS Web Central SQL Injection Vulnerability

ARCHIBUS Web Central is a web-based network management center for ARCHIBUS that organizes facilities and infrastructure management tasks in an intuitive web browser interface. All infrastructure data is stored in a centralized repository so that authorized users from anywhere in the world can...

Arista Networks Arista EOS 安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

ZTE ZXCDN Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in ZTE ZXCDN, a unified network management platform from ZTE Corporation China. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attacker can exploit the vulnerability to execute JavaScrip...

CVE-2022-22276

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user...

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, arises due to the failure to take measures to eliminate special elements used in the operating system’s command set. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of Fortinet FortiWLM’s WLAN access point and LAN switch management systems exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a...

SonicWall SonicOS 信息泄露漏洞

Sonicwall SonicWall SonicOS is an operating system designed for SonicWall firewall appliances from Sonicwall U.S.A. An information disclosure vulnerability exists in SonicWall SonicOS, which stems from the affected product exposing sensitive information to unauthorized users via SNMP. No detailed...

Sonicwall SonicOS 信息泄露漏洞

Sonicwall SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from Sonicwall, Inc. A security vulnerability exists in Sonicwall SonicOS, which stems from a vulnerability in the SNMP service that causes sensitive information about a wireless access point to b...

CVE-2022-20684

A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause an affected device to unexpectedly reload, resulting in a denial of...

Cisco IOS输入验证错误漏洞

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices.Cisco IOS XE has a denial of service vulnerability that stems from an SNMP trap that causes a fatal error in Cisco IOS XE, which can be exploited by attackers to trigger a denial of service...

多款 Siemens 产品缓冲区错误漏洞

SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions. An out-of-bounds read vulnerability exists in Siemens SCALANCE X-300 Switch Family...