Lucene search
+L

6516 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/05/27 12:00 a.m.27 views

Cisco RV340 JSON RPC set-snmp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling o...

4.3CVSS3.9AI score0.02081EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/27 12:00 a.m.29 views

Cisco RV340 JSON RPC set-snmp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling o...

4.3CVSS3.9AI score0.02081EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/05/24 4:44 p.m.20 views

LibreNMS arbitrary OS commands execution

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $POST'community' parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajaxoutput.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers...

10CVSS8.3AI score0.71487EPSS
SaveExploits9References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/05/24 12:00 a.m.39 views

AlmaLinux 8 : pcs (ALSA-2022:4661)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4661 advisory. - Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files. CVE-2022-29970 Note that Nessus has not tested for thi...

7.5CVSS6.8AI score0.02179EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2022/05/24 12:00 a.m.59 views

Security update for cacti, cacti-spine (moderate)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2022:0145-1 Rating: moderate References: 1192408 1196692 Cross-References: CVE-2022-0730 CVSS scores: CVE-2022-0730 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux...

9.8CVSS8.6AI score0.03499EPSS
SaveExploits0References2
CISA KEV Catalog
CISA KEV Catalog
added 2022/05/24 12:00 a.m.59 views

Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

A buffer overflow vulnerability in the Simple Network Management Protocol SNMP code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code...

8.8CVSS5.2AI score0.87565EPSS
SaveIn wildExploits8
Tenable Nessus
Tenable Nessus
added 2022/05/20 12:00 a.m.26 views

Oracle Linux 8 : pcs (ELSA-2022-9416)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9416 advisory. 0.10.12-6.0.1.el86.1 - Replace HAM-logo.png with a generic one 0.10.12-6.el86.1 - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz2081331...

7.5CVSS6.8AI score0.02179EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2022/05/17 10:32 p.m.23 views

net-snmp bug fix and enhancement update

An update is available for net-snmp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The net-snmp packages provide various libraries and tools for the Simple...

0.9AI score
SaveExploits0
Rockylinux
Rockylinux
added 2022/05/17 6:02 a.m.15 views

new packages: net-snmp

An update is available for net-snmp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/05/14 12:55 a.m.23 views

Centreon allows SNMP trap SQL Injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

9.8CVSS7.5AI score0.01764EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/14 12:55 a.m.34 views

GHSA-W2XF-4GG9-87WR Centreon allows SNMP trap SQL Injection

Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.27 allows SNMP trap SQL Injection...

9.8CVSS9.8AI score0.01764EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/10 6:46 a.m.8 views

ALBA-2022:2023 net-snmp bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

6.8AI score
SaveExploits0References1
Rockylinux
Rockylinux
added 2022/05/10 6:46 a.m.12 views

net-snmp bug fix and enhancement update

An update is available for net-snmp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2022/05/10 12:00 a.m.47 views

Cisco RV340 JSON RPC set-snmp Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling o...

4.3CVSS4.2AI score0.02081EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/05/09 12:00 a.m.69 views

Cisco RV340 JSON RPC set-snmp Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling o...

4.3CVSS3.1AI score0.01979EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/28 12:00 a.m.49 views

SonicWall SonicOS Information Disclosure Vulnerability (CNVD-2022-36986)

Sonicwall SonicWall SonicOS is an operating system designed for SonicWall firewall appliances from Sonicwall U.S.A. An information disclosure vulnerability exists in SonicWall SonicOS, which stems from the affected product exposing sensitive information to unauthorized users via SNMP. No detailed...

5.3CVSS2AI score0.00758EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/27 5:15 p.m.9 views

CVE-2022-22276

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user...

5.3CVSS6AI score0.00758EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/27 5:15 p.m.28 views

CVE-2022-22276

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user...

5.3CVSS0.00758EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/27 5:15 p.m.24 views

CVE-2022-22277

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext...

5.3CVSS0.00758EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/27 5:15 p.m.17 views

Design/Logic Flaw

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user...

5CVSS5.1AI score0.00758EPSS
SaveExploits0References1Affected Software49
Rows per page
Query Builder