Lucene search
+L

5712 matches found

CVE
CVE
added 2022/09/06 5:18 p.m.84 views

CVE-2022-23686

ArubaOS-CX LLDP service processing in AOS-CX is vulnerable. Affected versions are ArubaOS-CX Switches 10.09.xxxx up to 10.09.1010 and below, 10.08.xxxx up to 10.08.1050 and below, and 10.06.xxxx up to 10.06.0190 and below. The vulnerabilities may impact LLDP service availability and/or the manage...

4.3CVSS5AI score0.00319EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/09/06 5:18 p.m.103 views

CVE-2022-23682

Multiple vulnerabilities exist in the Aruba AOS-CX command line interface that could permit authenticated command injection, allowing an attacker to execute arbitrary commands as root and fully compromise the switch. Affected ArubaOS-CX versions are: 10.09.xxxx up to 10.09.1030, 10.08.xxxx up to ...

7.8CVSS8.2AI score0.00601EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/06 5:18 p.m.35 views

CVE-2022-23682

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

8.5AI score0.00601EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/09/06 5:18 p.m.41 views

CVE-2022-23681

Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version...

8.5AI score0.00569EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/06 5:18 p.m.77 views

CVE-2022-23683

CVE-2022-23683 describes authenticated command‑injection vulnerabilities in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation allows executing arbitrary commands as a privileged user on the underlying OS, potentially achieving complete compromise of switches running Aru...

7.2CVSS7.7AI score0.01675EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/09/06 12:00 a.m.11 views

PT-2022-16202 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.10.0002 and below ArubaOS-CX Switches versions 10.09.1030 and below ArubaOS-CX Switches versions 10.08.1070 and below ArubaOS-CX Switches versions 10.06.0210 and below Description: A vulnerability exists in...

6.8CVSS6.7AI score0.00364EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/06 12:00 a.m.16 views

PT-2022-16197 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1010 and below ArubaOS-CX Switches versions 10.08.1050 and below ArubaOS-CX Switches versions 10.06.0190 and below Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP...

4.3CVSS4.8AI score0.00319EPSS
SaveExploits0References3
ICS
ICS
added 2022/08/30 12:00 a.m.129 views

Mitsubishi Electric Multiple Factory Automation Products (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module Vulnerabilities: Infinite Loop, OS Command Injection 2...

10CVSS10AI score0.82612EPSS
SaveExploits7References4
ATTACKERKB
ATTACKERKB
added 2022/08/25 2:15 p.m.11 views

CVE-2022-37074

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switchdebuginfoset...

7.8CVSS7.1AI score0.00552EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/25 2:15 p.m.15 views

CVE-2022-37074

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switchdebuginfoset...

7.8CVSS5.8AI score0.00552EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/08/25 12:00 a.m.12 views

H3C GR-1200W 缓冲区错误漏洞

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the switchdebuginfoset method...

7.8CVSS5.6AI score0.00552EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/25 12:00 a.m.20 views

PT-2022-23788 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered via the function switch debug info set. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, consider disabling the switch debug info set function as a...

7.8CVSS7.8AI score0.00552EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/16 7:42 a.m.3 views

OPENSUSE-SU-2022:10089-1 Security update for seamonkey

This update for seamonkey fixes the following issues: update to SeaMonkey 2.53.13 Updates to devtools. Updates to build configuration. Starting the switch from Python 2 to Python 3 in the build system. Removal of array comprehensions, legacy iterators and generators bug 1414340 and bug 1098412...

7.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/10 8:15 p.m.7 views

CVE-2022-35525

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter ledswitch, which leads to command injection in page /ledonoff.shtml...

9.8CVSS7.3AI score0.02413EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/10 12:00 a.m.13 views

多款WAVLINK产品安全漏洞

WAVLINK AC1200 and so on are products of China RuiYin Technology WAVLINK company.WAVLINK AC1200 is a dual-band high-power wireless router.WAVLINK WL-WN531P3 is a wireless router.WAVLINK WN533A8 is a wireless router. A security vulnerability exists in WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3,...

9.8CVSS8.3AI score0.02413EPSS
SaveExploits1References2
HPE Security Bulletins
HPE Security Bulletins
added 2022/08/01 12:00 a.m.17 views

HPESBST04353 rev.1 - HPE B-series Fibre Channel SAN Switch Brocade Fabric OS (FOS), Directory Traversal

Potential Security Impact: Local: Directory Traversal; Remote: Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 8/8 SAN Switch - v7.4.1b and v7.3.1d HPE 8/24 SAN Switch - v7.4.1b and v7.3.1d Brocade 8Gb SAN Switch for HPE BladeSystem c-Class - v7.4.1b and...

5.5CVSS6.1AI score0.00226EPSS
SaveExploits0
OSV
OSV
added 2022/07/29 8:15 p.m.12 views

CVE-2022-2323

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions...

8.8CVSS6.3AI score0.06053EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/29 8:15 p.m.23 views

CVE-2022-2323

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions...

8.8CVSS7.4AI score0.06053EPSS
SaveExploits0References2
NVD
NVD
added 2022/07/29 8:15 p.m.33 views

CVE-2022-2323

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions...

8.8CVSS0.06053EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/29 8:15 p.m.29 views

Remote code execution

Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in the host system. This vulnerability impacts SonicWall Switch 1.1.1.0-2s and earlier versions...

6.5CVSS8.8AI score0.06053EPSS
SaveExploits0References1Affected Software7
Rows per page
Query Builder