5708 matches found
Moxa Industrial Managed Switch Uncontrolled Resource Consumption (CVE-2015-6465)
The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
CVE-2023-3718 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface
An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker ...
CVE-2023-3718 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface
An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker ...
PT-2023-23319 · Brocade · Brocade Fabric Os
Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.1c and 9.2.0 Description: A buffer overflow issue in the secpolicydelete command could allow an authenticated privileged user to crash the Brocade Fabric OS switch, leading to a denial of service...
HPESBNW04498 rev.2 - Authenticated Remote Code Execution in Aruba CX Switches
Potential Security Impact: Remote: Execution of Arbitrary Commands SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series See vulnerability summary for details Aruba CX 4100i Switch Series See vulnerability summary for details Aruba CX 6000 Switch Series See...
Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service (CVE-2019-1597)
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...
java-1.8.0-openjdk security and bug fix update
1:1.8.0.382.b05-1 - Update to shenandoah-jdk8u372-b05 GA - Update release notes for shenandoah-8u372-b05. - This tarball is embargoed until 2023-07-18 @ 1pm PT. - Resolves: rhbz2221106 1:1.8.0.382.b04-0.1.ea - Update to shenandoah-jdk8u382-b04 EA - Update release notes for shenandoah-8u382-b04. -...
Wallarm at Black Hat USA 2023 Booth #3131
Wallarm is excited to be back at Black Hat USA this year and meet with our friends in the community wanting or perhaps needing to learn more about integrated web app and API protection. We look forward to seeing you there! Expo Hours If you’re attending in person, the Business Hall is open for tw...
Juniper Junos OS Vulnerability (JSA69502)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69502 advisory. - A Denial of Service DoS vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast...
Stable Channel Update for ChromeOS / ChromeOS Flex
ChromeOS M115 Stable The Stable channel is being updated to OS version: 15474.61.0 Browser version: 115.0.5790.131 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community ...
CVE-2023-21248
In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...
CVE-2023-30673
Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.230521 allows local attackers to delete arbitrary directory using directory junction...
CVE-2023-30673
Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.230521 allows local attackers to delete arbitrary directory using directory junction...
CVE-2023-30672
Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.230433 allows attackers to cause permanent DoS via directory junction...
CVE-2023-30672
Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.230433 allows attackers to cause permanent DoS via directory junction...
Input validation
Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.230521 allows local attackers to delete arbitrary directory using directory junction...
Privilege escalation
Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.230433 allows attackers to cause permanent DoS via directory junction...
CVE-2023-30673
Summary : CVE-2023-30673 affects Samsung Smart Switch PC on Windows, where improper validation of integrity checks in versions prior to 4.3.23052_1 enables a local attacker to delete arbitrary directories via directory junctions. The CVSSv3.1 metrics indicate Local access, Low attack complexity a...