Lucene search
+L

3305 matches found

OSV
OSV
•added 2018/08/01 8:29 p.m.•14 views

CVE-2018-0407

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

5.4CVSS6AI score0.00678EPSS
SaveExploits0References2
CVE
CVE
•added 2018/08/01 8:00 p.m.•90 views

CVE-2018-0407

Cisco Small Business 300 Series (Sx300) Managed Switches web-based management interface is vulnerable to persistent cross-site scripting (XSS) due to insufficient validation of user input. An authenticated, remote attacker could lure a user into clicking a crafted link, allowing arbitrary script ...

5.4CVSS5.2AI score0.00678EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2018/08/01 8:00 p.m.•76 views

CVE-2018-0408

Cisco Small Business 300 Series (Sx300) Managed Switches web UI is vulnerable to a reflected XSS due to insufficient input validation. An authenticated attacker could lure a user to click a crafted link, executing arbitrary script code in the UI context or accessing browser-based information. Aff...

5.4CVSS5.3AI score0.00678EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2018/08/01 8:00 p.m.•50 views

CVE-2018-0408

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

6AI score0.00678EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2018/08/01 8:00 p.m.•41 views

CVE-2018-0407

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

6AI score0.00678EPSS
SaveExploits0References2
Cisco
Cisco
•added 2018/08/01 4:00 p.m.•76 views

Cisco Small Business 300 Series Managed Switches Authenticated Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

5.4CVSS1.5AI score0.00678EPSS
SaveExploits0References1
Cisco
Cisco
•added 2018/08/01 4:00 p.m.•107 views

Cisco Small Business 300 Series Managed Switches Persistent Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

5.4CVSS2.4AI score0.00678EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/08/01 12:00 a.m.•5 views

PT-2018-1836

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 300 Series Managed Switches affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote...

5.4CVSS0.00678EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/01 12:00 a.m.•6 views

CVE-2018-0408: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

5.4CVSS6AI score0.00678EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/01 12:00 a.m.•9 views

CVE-2018-0407: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Small Business 300 Series Sx300 Managed Switches could allow an authenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...

5.4CVSS6AI score0.00678EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/08/01 12:00 a.m.•5 views

PT-2018-1837

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 300 Series Managed Switches affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote...

5.4CVSS0.00678EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2018/07/18 11:00 p.m.•32 views

CVE-2018-0372

A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service DoS condition on an affect...

7.5AI score0.02508EPSS
SaveExploits0References2
Cisco
Cisco
•added 2018/07/18 4:00 p.m.•54 views

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode DHCP Version 6 Denial of Service Vulnerability

A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service DoS condition on an affect...

8.6CVSS1.7AI score0.02508EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/07/18 12:00 a.m.•3 views

PT-2018-8798

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode version 13.01k Description A vulnerability in the DHCPv6 feature could allow an unauthenticated, remote attacker to cause a Denial of Service DoS condition ...

7.8CVSS0.02508EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/18 12:00 a.m.•10 views

CVE-2018-0372: Uncontrolled Resource Consumption

A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service DoS condition on an affect...

7.8CVSS7.2AI score0.02508EPSS
SaveExploits0References3
HPE Security Bulletins
HPE Security Bulletins
•added 2018/07/18 12:00 a.m.•19 views

HPESBHF03838 rev.1 - HPE iMC and Comware 7-based Switches and Routers using OpenSSL, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC All versions - IMC PLAT and IMC UAMTAM HPE FlexNetwork VSR1000 Virtual Services Router Series...

7.5CVSS6.8AI score0.57322EPSS
SaveExploits6
CNVD
CNVD
•added 2018/07/17 12:00 a.m.•4 views

IBM Networking Operating System Information Disclosure Vulnerability

IBM System Networking and Blade Network Technology BNT switches are both switch products from IBM Corporation in the U.S. The IBM Networking Operating System is a set of operating systems for switches that run on them. A security vulnerability exists in the Fibre Channel over Ethernet FCoE featur...

5.3CVSS5.2AI score0.00744EPSS
SaveExploits0References1
NVD
NVD
•added 2018/07/13 9:29 p.m.•25 views

CVE-2013-0570

The Fibre Channel over Ethernet FCoE feature in IBM System Networking and Blade Network Technology BNT switches running IBM Networking Operating System aka NOS, formerly BLADE Operating System floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow...

5.3CVSS5AI score0.00744EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/07/13 9:00 p.m.•29 views

CVE-2013-0570

The Fibre Channel over Ethernet FCoE feature in IBM System Networking and Blade Network Technology BNT switches running IBM Networking Operating System aka NOS, formerly BLADE Operating System floods data frames with unknown MAC addresses out on all interfaces on the same VLAN, which might allow...

5AI score0.00744EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/07/13 12:00 a.m.•1 views

PT-2018-4070

Name of the Vulnerable Software and Affected Versions IBM System Networking and Blade Network Technology BNT switches running IBM Networking Operating System NOS affected versions not specified Description The issue affects the Fibre Channel over Ethernet FCoE feature, potentially allowing remote...

5.3CVSS0.00744EPSS
SaveExploits0References3
Rows per page
Query Builder