net-snmp:snmp_e2e_fuzzer: Heap-double-free in snmp_e2e_fuzzer.c

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5990211341123584 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpe2efuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type:...

SNMP Manager cannot get data from NetScaler

SNMP manager cannot get data from NetScaler, getting error "No Response from " when doing snmpwalk in SNMP manager. root@Zabbix snmpwalk -v 2c -c Timeout: No Response from Note: The SNMP manager is Zabbix in this case...

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

Cross site request forgery (csrf)

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

CVE-2023-39073

CVE-2023-39073 affects SNMP Web Pro v1.1. The connected records corroborate a remote code execution path and exposure of sensitive information via a crafted request. The consensus across sources describes the vulnerability as affecting SNMP Web Pro 1.1, but the documents do not provide product/ve...

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

PT-2023-26775 · Unknown · Snmp Web Pro

Name of the Vulnerable Software and Affected Versions: SNMP Web Pro version 1.1 Description: An issue in the software allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted request. Recommendations: For SNMP Web Pro version 1.1, consider disabling the...

CVE-2023-39073: Missing Authorization

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

Cisco UCS 6300 Series Fabric Interconnects SNMP DoS (cisco-sa-fp-ucsfi-snmp-dos-qtv69NAO)

A vulnerability in the Simple Network Management Protocol SNMP service of Cisco UCS 6300 Series Fabric Interconnects could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to the improper handling of specific SNMP...

Oracle Linux 7 : net-snmp (ELSA-2020-1081)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1081 advisory. - fix for CVE-2018-18066 1638911 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

Cisco Firepower 4100 Series, Firepower 9300 Security Appliances SNMP DoS (cisco-sa-fp-ucsfi-snmp-dos-qtv69NAO)

A vulnerability in the Simple Network Management Protocol SNMP service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliances could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due ...

CVE-2023-39362

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

CVE-2023-39362

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

Command injection

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

CVE-2023-39362 Authenticated command injection in SNMP options of a Device

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

CVE-2023-39362 Authenticated command injection in SNMP options of a Device

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

CVE-2023-39362

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

CVE-2023-39362

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

CVE-2023-39362

Cacti CVE-2023-39362 affects the web-based monitoring framework. In version 1.2.24, an authenticated privileged user can abuse the SNMP options of a Device to trigger a command injection via an input that reaches an exec call in lib/snmp.php, potentially yielding remote code execution on the serv...