18998 matches found
Input validation
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...
CVE-2023-4481
CVE-2023-4481 describes an improper input validation in Juniper’s Routing Protocol Daemon (rpd) for Junos OS and Junos OS Evolved. A remote, unauthenticated attacker can cause a DoS by sending crafted BGP UPDATE messages over an existing BGP session; the impact can be sustained as updates are pro...
Exploitation of Juniper Networks SRX Series and EX Series Devices
On August 17, 2023, Juniper Networks published an out-of-band advisory on four different CVEs affecting Junos OS on SRX and EX Series devices: CVE-2023-36846 Affects the SRX Series A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an...
Earth Estries' Espionage Campaign Targets Governments and Tech Titans Across Continents
A hacking outfit nicknamed Earth Estries has been attributed to a new, ongoing cyber espionage campaign targeting government and technology industries based in the Philippines, Taiwan, Malaysia, South Africa, Germany, and the U.S. "The threat actors behind Earth Estries are working with high-leve...
Vulnerabilities fixed in VMware Aria Operations Networks
VMWare has fixed vulnerabilities in Aria Operations Networks, formerly known as vRealize Network Insight. A malicious party could exploit the vulnerabilities to bypass authentication, or to execute arbitrary code on the underlying system. The most serious vulnerability has been given attribute...
VMWare Aria Operations for Networks Multiple Vulnerabilities (VMSA-2023-0018)
According to its self-reported version, the instance of VMWare Aria Operations for Networks running on the remote web server is 6.x 6.2.0.1688977536, 6.3.x 6.3.0.1688986302, 6.4.x 6.4.0.1689079386, 6.5.x 6.5.1.1688974096, 6.6.x 6.6.0.1688979729, 6.7.x 6.7.0.1688972173, 6.8.x 6.8.0.1688989059, 6.9...
The vulnerability of the network and application monitoring tool VMware Aria Operations for Networks, which allows unauthorized users to download files of a malicious nature, enables attackers to execute arbitrary code.
The vulnerability of the network and application monitoring tool in VMware Aria Operations for Networks relates to the unlimited download of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the network and application monitoring tool, VMware Aria Operations for Networks (previously vRealize Network Insight), is related to errors in the code of the pseudorandom number generator. This allows attackers to increase their privileges.
The vulnerability of the network and application monitoring tool, VMware Aria Operations for Networks previously known as vRealize Network Insight, is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability could allow a malicious actor to enhance their...
cups: Information leak through Cups-Get-Document operation
A vulnerability was found in OpenPrinting CUPS. Unauthorized users are permitted to fetch documents over local or remote networks, leading to confidentiality breach...
CVE-2023-34039
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI...
CVE-2023-20890
Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution...
CVE-2023-20890
Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution...
CVE-2023-20890
VMware Aria Operations for Networks is affected by CVE-2023-20890, an arbitrary file write vulnerability that authenticated administrators can abuse to write files to arbitrary locations and achieve remote code execution. Nessus plugin confirms multiple affected 6.x versions; VMware has released ...
CVE-2023-34039
CVE-2023-34039 affects VMware Aria Operations for Networks (formerly vRealize Network Insight). Affected versions 6.0–6.10 did not regenerate SSH keys for the internal support/ubuntu users, enabling an attacker with network access to bypass SSH authentication and gain CLI access. Root cause: lack...
cups: Information leak through Cups-Get-Document operation
A vulnerability was found in OpenPrinting CUPS. Unauthorized users are permitted to fetch documents over local or remote networks, leading to confidentiality breach...
Aruba Networks ArubaOS 缓冲区错误漏洞
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS Switch that originates from unauthenticated remote code execution via...
VMware Aria Operations 加密问题漏洞
VMware Aria Operations is a unified, AI-powered, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware. Aria Operations for Networks has a security vulnerability that stems from a lack of unique cryptographic key generation, resulting in an...
VulnCheck KEV: CVE-2023-36846
Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is...
VMWare Aria Operations for Networks (vRealize Network Insight) SSH Private Key Exposure
VMWare Aria Operations for Networks vRealize Network Insight versions 6.0.0 through 6.10.0 do not randomize the SSH keys on virtual machine initialization. Since the key is easily retrievable, an attacker can use it to gain unauthorized remote access as the "support" root user. Module Options msf...
cups: Information leak through Cups-Get-Document operation
A vulnerability was found in OpenPrinting CUPS. Unauthorized users are permitted to fetch documents over local or remote networks, leading to confidentiality breach...