CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5796

A Remote Cross Site Request Forgery CSRF vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found...

Code injection

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

Cross site request forgery (csrf)

A Remote Cross Site Request Forgery CSRF vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found...

CVE-2017-5796

A Remote Cross Site Request Forgery CSRF vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

CVE-2017-5786 describes a local Unauthorized Data Modification vulnerability in HP/ HPE OfficeConnect Network Switches, affected in PT.02.01 including PT.01.03–PT.01.14. The flaw allows an attacker with local access and low privileges to modify data (I: HIGH, C: NONE, A: NONE) without user intera...

CVE-2017-5796

The CVE-2017-5796 entry concerns a remote Cross-Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches, specifically version RA.15.05.0006. Public sources in the connected documents describe an issue where HTTP requests are not properly validated, enabling an attacker to pe...

Cisco NX-OS System Software Unauthorized Operation Vulnerability

Cisco Nexus 3000 Series Switches and others are products of Cisco Corporation.Cisco Nexus 3000 Series Switches is a 3000 series switch.Nexus 9500 R-Series Line Cards is a 9500R series line card. NX-OS System Software is an operating system that runs on it. An unauthorized operation vulnerability...

Cisco Small Business 300 and 500 Series HTTP Response Splitting Vulnerability

Cisco 350 Series Managed Switches and so on are the United States Cisco Cisco company's switch equipment.Cisco Small Business Managed Switches software is running in which a set of switch management software. An HTTP response splitting vulnerability exists in the web framework of the Cisco Small...

Cisco Small Business Switches Cross-Site Scripting Vulnerability

Cisco Small Business 300 Series Managed Switches and so on are American Cisco Cisco company's switch equipment.Cisco Small Business Managed Switches software is running in which a set of switch management software. A cross-site scripting vulnerability exists in Cisco Small Business Managed Switch...

CVE-2018-0102

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability exists because the affected software attempts to free the same area of memory twice...

CVE-2018-0102

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability exists because the affected software attempts to free the same area of memory twice...

CVE-2018-0088

A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenticated, local attacker to impact the stability of the device. This could result in arbitrary code execution or a denial of service DoS...

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

Cross site scripting

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

Race condition

A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...

CVE-2018-0092

A vulnerability in the network-operator user role implementation for Cisco NX-OS System Software could allow an authenticated, local attacker to improperly delete valid user accounts. The network-operator role should not be able to delete other configured users on the device. The vulnerability is...

Race condition

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability exists because the affected software attempts to free the same area of memory twice...

Input validation

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...