699 matches found
EUVD-2025-23524
Malicious code in bioql PyPI...
EUVD-2025-23516
Malicious code in bioql PyPI...
EUVD-2025-22092
Malicious code in bioql PyPI...
EUVD-2025-22093
Malicious code in bioql PyPI...
EUVD-2025-22106
Malicious code in bioql PyPI...
EUVD-2025-22108
Malicious code in bioql PyPI...
EUVD-2025-22090
Malicious code in bioql PyPI...
EUVD-2025-23523
Malicious code in bioql PyPI...
Ruckus Wireless ICX Switches Cross-site Scripting and Cross-site Request Forgery (CVE-2023-39905)
A vulnerability in the web-based management interface of the RUCKUS ICX product line could allow a remote attacker to execute XSS and CSRF attacks against the user of the interface. To exploit this vulnerability, an attacker would require the targeted user to click a crafted link that would send ...
Ruckus Wireless ICX Switches Cross-site Scripting and Cross-site Request Forgery (CVE-2023-39904)
A vulnerability in the web-based management interface of the RUCKUS ICX product line could allow a remote attacker to execute XSS and CSRF attacks against the user of the interface. To exploit this vulnerability, an attacker would require the targeted user to click a crafted link that would send ...
Ruckus Wireless ICX Switches Improper Validation of Integrity Check Value (CVE-2024-50604)
The following vulnerabilities are found in the RUCKUS FastIron firmware that runs on the RUCKUS ICX product line: - CVE-2024-50607: Directory traversal vulnerability - CVE-2024-50604: Insufficient validation for software component integrity check Collectively, these vulnerabilities can allow an...
Ruckus Wireless ICX Switches Cross-site Scripting (CVE-2013-6786)
Due to a Cross-site scripting XSS vulnerability, by requesting a nonexistent URI in a crafted HTTP Referrer header, arbitrary web scripts or HTML can be injected to the Ruckus FastIron device's web server. This plugin only works with Tenable.ot. Please visit...
Ruckus Wireless ICX Switches Uncontrolled Resource Consumption (CVE-2019-11478)
Three flaws were found in the Linux kernel's handling of TCP networking. The most severe vulnerability could allow a remote attacker to trigger a kernel panic in systems running the affected software and, as a result, impact the system's availability. The issues have been assigned multiple CVEs:...
Ruckus Wireless ICX Switches Cross-site Scripting and Cross-site Request Forgery (CVE-2023-39906)
A vulnerability in the web-based management interface of the RUCKUS ICX product line could allow a remote attacker to execute XSS and CSRF attacks against the user of the interface. To exploit this vulnerability, an attacker would require the targeted user to click a crafted link that would send ...
Ruckus Wireless ICX7450-48 Cross-site Scripting (CVE-2018-11027)
A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...
CVE-2025-44958
RUCKUS Network Director RND before 4.5 stores passwords in a recoverable format...
CVE-2025-44954
RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account...
CVE-2025-44963
RUCKUS Network Director RND before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key...