Cisco Small Business 220 Series Smart Switches 跨站脚本漏洞

Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco. A cross-site scripting vulnerability exists in the Cisco Small Business 220 Series Smart Switches, which originates from a vulnerability in the web management interface of the Cisco Small Business 220 Series...

Cisco Small Business 200 Series Managed Switches 跨站脚本漏洞

Cisco Small Business 200 Series Managed Switches is a 200 Series managed switch from Cisco, Inc. A cross-site scripting vulnerability exists in Cisco Small Business 220 Series Smart Switches, which stems from improperly checking the value of a parameter on an affected page. An attacker could use...

PT-2021-13523

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 220 Series Smart Switches affected versions not specified Description: The web-based management interface of the affected switches has multiple issues that could allow an attacker to hijack a user session, execute arbitra...

CVE-2021-28805

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

Code injection

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

CVE-2021-28805

CVE-2021-28805 affects QNAP QSS on certain QSW switches: QSW-M2108-2C/2S and QSW-M2108R-2C (pre-1.0.3 build 20210505) and QSW-M408 (pre-1.0.12 build 20210506). Root cause: inclusion of sensitive information in the QSS source code, enabling attackers to read application data. Impact is defined in ...

CVE-2021-28801

CVE-2021-28801 describes an out-of-bounds read in QNAP QSS on certain QSW-M2108-2C/2S/2C-RV switches. Affected versions are QSS before 1.0.2 build 20210122 for QSW-M2108-2C, QSW-M2108-2S, and QSW-M2108R-2C. The vulnerability could allow an attacker to read sensitive information from the system. P...

CVE-2021-28801 Out-of-Bounds Read Vulnerability in QSS

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28805

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28801: Out-of-bounds Read

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

QNAP Switch System 缓冲区错误漏洞

QNAP Systems QSS is an unmanaged switch from China Weilian QNAP Systems. A security vulnerability exists in the QNAP Switch System QSS that originates from an out-of-bounds read. An attacker could exploit the vulnerability to read sensitive information on the system. The following products and...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

CVE-2021-31658

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application t...

CVE-2021-31659

TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery CSRF. All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the passwo...

Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.

Summary Public disclosed vulnerability from OpenSSL in the Fabric OS used by IBM b-type SAN directors and switches. Vulnerability Details CVEID: CVE-2020-1968 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a Raccoon attack in the TLS specification. B...

HPESBST04140 rev.3 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v9.0.1b, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Denial of Service DoS, User Validation Failure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 32Gb Fibre Channel SAN Switch for HPE Synergy - Prior to 9.0.1b HPE B-series SN6700B Fibre Channel Switch - Prior to...

ArubaOS-CX < 10.04.3031 Memory Corruption (ARUBA-PSA-2020-009)

The version of ArubaOS-CX installed on the remote host is prior to version 10.04.3031. Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of...

ArubaOS-CX < 10.04.2000 Memory Corruption (ARUBA-PSA-2020-009)

The version of ArubaOS-CX installed on the remote host is prior to version 10.04.2000. Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of...