Lucene search
+L

7634 matches found

Positive Technologies
Positive Technologies
•added 2025/07/21 12:00 a.m.•32 views

PT-2025-30360 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: LibreNMS versions 25.6.0 and below Description: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring system. Versions 25.6.0 and below contain an architectural vulnerability in the /ajax form.php endpoint that permits Remot...

7.5CVSS6.9AI score0.01073EPSS
SaveExploits1References16
GithubExploit
GithubExploit
•added 2025/07/03 8:02 p.m.•420 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scann...

9.8CVSS7.4AI score0.10562EPSS
SaveExploits4
NVD
NVD
•added 2025/06/25 8:15 a.m.•35 views

CVE-2024-51978

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP...

9.8CVSS0.15832EPSS
SaveExploits0References13
EUVD
EUVD
•added 2025/06/25 7:17 a.m.•21 views

EUVD-2024-54698

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP...

9.8CVSS7.5AI score0.4663EPSS
SaveExploits0References9
OpenVAS
OpenVAS
•added 2025/06/25 12:00 a.m.•6 views

D-Link Device Detection (SNMP)

SNMP based detection of D-Link devices. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.171560";...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•13 views

TencentOS Server 4: net-snmp (TSSA-2025:0057)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0057 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

6.5CVSS6.8AI score0.5346EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•9 views

TencentOS Server 3: net-snmp (TSSA-2023:0072)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0072 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

6.5CVSS6.5AI score0.5346EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2025/06/16 12:00 a.m.•21 views

TencentOS Server 4: zabbix (TSSA-2024:1129)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1129 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

9.9CVSS6.9AI score0.79105EPSS
SaveExploits18References17
Tenable Nessus
Tenable Nessus
•added 2025/06/13 12:00 a.m.•10 views

B&R Automation Studio and Automation Runtime Improper Authorization (CVE-2019-19108)

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP. This plugin only works with Tenable.ot. Please visit...

9.4CVSS8.2AI score0.01645EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/28 9:44 a.m.•34 views

CVE-2025-41654

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

8.2CVSS6.9AI score0.00415EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/05/28 12:00 a.m.•28 views

Planet FW-WGS-804HPT web_snmpv3_remote_engineId_add_post function buffer overflow vulnerability

Planet FW-WGS-804HPT is a wall mounted managed switch from Planet China. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the failure of the remoteip parameter in the websnmpv3remoteengineIdaddpost function to properly validate the length of the input dat...

9.8CVSS8.5AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/26 9:15 a.m.•54 views

CVE-2025-41654

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

8.2CVSS0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/26 8:21 a.m.•13 views

CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

8.2CVSS6.9AI score0.00415EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/26 8:21 a.m.•62 views

CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

8.2CVSS0.00415EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/26 8:21 a.m.•121 views

CVE-2025-41654

CVE-2025-41654 affects Pepperl+Fuchs Profinet Gateway LB8122A.1.EL and FB8122A.1.EL. An unauthenticated remote attacker can access information about running processes via SNMP, with the amount of returned data potentially triggering a watchdog reboot. Public documents confirm information disclosu...

8.2CVSS8.2AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/26 12:00 a.m.•3 views

CVE-2025-41654: Missing Authentication for Critical Function

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog...

8.2CVSS5.8AI score0.00415EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/05/25 12:00 a.m.•23 views

The vulnerability of the web_snmp_v3host_add_post() function in PLANET Technology’s microcontroller software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the websnmpv3hostaddpost function in PLANET Technology’s microcontroller software stems from the issue of the operation exceeding the buffer boundaries in memory when processing the hostip parameter. Exploiting this vulnerability allows an attacker to compromise the...

10CVSS5.7AI score0.00531EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:38 a.m.•29 views

CVE-2024-47528

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting XSS can be achieved by uploading a new Background for a Custom Map. Users with "admin" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload...

4.8CVSS5.2AI score0.00411EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:38 a.m.•13 views

CVE-2024-25658

Cleartext storage of passwords in Infinera TNMS Transcend Network Management System Server 19.10.3 allows attackers with access to the database or exported configuration files to obtain SNMP users' usernames and passwords in cleartext...

6.5CVSS6.9AI score0.00185EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:32 a.m.•28 views

CVE-2024-37992

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT 6GT2811-6BC10-2AA0 All versions V4.2, SIMATIC Reader RF610R ETSI 6GT2811-6BC10-0AA0 All versions V4.2, SIMATIC Reader RF610R FCC 6GT2811-6BC10-1AA0 All versions V4.2, SIMATIC Reader RF615R CMIIT 6GT2811-6CC10-2AA0 All versions V4....

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0
Rows per page
Query Builder