WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

Software Maintenance Switch Type Plugin Vulnerable versions = 1.5.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47590 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 56383f0b4655 Credits minhtuanact Required...

CVE-2023-24512

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...

Design/Logic Flaw

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...

CVE-2023-28088

An HPE OneView appliance dump may expose SAN switch administrative credentials...

CVE-2023-28088

An HPE OneView appliance dump may expose SAN switch administrative credentials...

Command injection

An HPE OneView appliance dump may expose SAN switch administrative credentials...

CVE-2023-28088

The CVE-2023-28088 issue affects HPE OneView appliances, stemming from an appliance dump that could expose SAN switch administrative credentials. Documented details show a CVSSv3.1 base score of 7.8 (HIGH), with local attack vector, low attack complexity, and privileges required as LOW; user inte...

CVE-2023-28088

An HPE OneView appliance dump may expose SAN switch administrative credentials...

CVE-2023-28088

An HPE OneView appliance dump may expose SAN switch administrative credentials...

CVE-2023-29779

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

CVE-2023-29779

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

Command injection

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

CVE-2023-24512 On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch.

On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. This situation occurs only when the Streaming Telemetry Agent referred to as the TerminAttr agent is enabl...

CVE-2023-29779

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

Sengled Dimmer Switch 安全漏洞

The sengled Sengled Dimmer Switch is a smart light switch from sengled. A security vulnerability exists in Sengled Dimmer Switch version V0.0.9. A remote attacker could exploit the vulnerability to send a malicious message to a vulnerable device and cause a crash...

PT-2023-22415 · Sengled · Sengled Dimmer Switch

Name of the Vulnerable Software and Affected Versions: Sengled Dimmer Switch version 0.0.9 Description: The issue allows a remote attacker to send malicious Zigbee messages to a vulnerable device, causing it to crash. After receiving the malicious command, the device will continuously report its...

CVE-2023-24512

The CVE-2023-24512 issue affects Arista EOS running with the Streaming Telemetry Agent (TerminAttr) enabled and gNMI access configured. An authorized attacker with gNMI permissions could craft a request to update arbitrary switch configurations, under conditions where TerminAttr is present and gR...

CVE-2023-29779

CVE-2023-29779 affects Sengled Dimmer Switch V0.0.9. Vulnerability allows a remote attacker to send malicious Zigbee messages that crash the device and cause it to report status repeatedly, ultimately draining the battery after the Set_short_poll_interval command. No exploit details are provided ...

PT-2023-21547 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns an HPE OneView appliance dump that may expose SAN switch administrative credentials. Recommendations: At the moment, there is no information about a newer version tha...

Hewlett Packard Enterprise OneView 安全漏洞

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView prior to version 8.2 that stems from a device dump that could expose SAN switch...