94 matches found
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers via /transactions/link/switch/id...
NETGEAR 安全漏洞
GC108P and other smart switch products from Netgear, U.S.A. Several of Netgear's smart switches are vulnerable to an input validation error, which stems from a failure of the daemon to check for validation when an authentication TLV is missing from an incoming NSDP packet. An unauthenticated...
QSW-M2116P-2T2S 安全漏洞
The Qnap Systems QSW-M2116P-2T2S is a 90-watt 10GbE PoE++ and 30-watt 2.5GbE PoE+ managed switch for Wi-Fi Generation 6 from Qnap Systems. A security vulnerability exists in QSW-M2116P-2T2S that could allow a remote attacker to read sensitive information by accessing an unrestricted storage...
NETGEAR JGS516PE/GS116Ev2 Arbitrary Data Write Vulnerability
The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An arbitrary data write vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP firmware update mechanism not properly implementing firmware validation. A remote...
NETGEAR JGS516PE/GS116Ev2 Denial of Service Vulnerability
The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A denial of service vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP server not being able to handle multiple connections. An attacker could exploit the...
NETGEAR JGS516PE/GS116Ev2 Integer Overflow Vulnerability
The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. An integer overflow vulnerability exists in the Web Management Panel of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker could exploit this vulnerability to cause a denial of service...
NETGEAR JGS516PE/GS116Ev2 Password Hash Mechanism Insecurity Vulnerability
The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A security vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. It allows an external attacker to gain administrative access to the switch...
SIEMENS SCALANCE X208 suffers from a Denial of Service Vulnerability
The SCALANCE X208 is a Siemens switch. A denial of service vulnerability exists in the SIEMENS SCALANCE X208, which can be exploited by an attacker to cause the device to fail to function properly...
HPE KVM IP Console Switches Remote Code Injection Vulnerability
HPE KVM IP Console Switches is an HP switch device. A remote code injection vulnerability exists in HPE KVM IP Console Switches, which allows remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary code in an application context...
The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to execute a type of attack known as “man-in-the-middle” attack.
The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the transmission of confidential information in the form of plain text. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attac...
Unspecified Vulnerability in ZyXEL GS1900 (CNVD-2019-41672)
ZyXEL GS1900 is a managed switch from ZyXEL Taiwan, China. A security vulnerability exists in the Zyxel GS1900 using firmware prior to version 2.50AAHH.0C0, which originates from the libclicmd.so library in 'cmdsystracerouteexec', 'cmd sysarpclear' and 'cmdsyspingexec' functions in the...
The vulnerability of the microprogramming software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the use of a unstable cryptographic algorithm in the configuration files. This allows an intruder to gain unauthorized access to the protected information.
The vulnerability of the microprogramming software for Moxa EDS-G516E and Moxa EDS-510E switches is related to the use of a unstable cryptographic algorithm in the configuration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...
CVE-2019-0715
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the...
CVE-2019-1602
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker...
The vulnerability of CGI applications of microprogramming software for controlled switches from FL SWITCH allows a hacker to access the contents of configuration files.
The vulnerability of CGI applications of microprogramming software for controlled switches from FL SWITCH Phoenix Contact is related to security mechanisms that are flawed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to configuration files’ contents...
kernel: error in exception handling leads to DoS (CVE-2018-8897 regression)
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch operation, processor does not deliver interrupts and exceptions, they are delivered once the first instruction after the stack switch...
CVE-2018-10987
An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An authenticated attacker can send a specially crafted UDP packet, and execute commands on the vacuum cleaner as root. The bug is in the...
Man-in-the-middle Attack Vulnerability in Multiple Belden Hirschmann Switch Products
Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of several Belden Hirschmann switch products, which originates from a program that passes sensitive information in clear text. An attacker could exploit this vulnerability to obtain...
Huawei S7700 and S9700 Denial of Service Vulnerability
The Huawei S7700 and S9700 are both intelligent routing switches from Huawei China. The Huawei S7700 and S9700 denial of service vulnerability, the vulnerability is due to the device failing to adequately authenticate messages. An unauthenticated, remote attacker could exploit this vulnerability ...
Cisco IOS Software for Cisco Catalyst 6800 Series Switches Denial of Service Vulnerability
Cisco Catalyst 6800 Series Switches is a switch device from Cisco USA.IOS is one of the operating systems used for network devices. A denial of service vulnerability exists in the Virtual Private LAN Service VPLS code in the IOS in Cisco Catalyst 6800 Series Switches. An attacker could exploit th...