Lucene search
+L

2808 matches found

RedhatCVE
RedhatCVE
added 2025/02/17 12:24 a.m.14 views

CVE-2024-10405

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...

6.9CVSS6.8AI score0.00192EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/02/13 12:0 a.m.8 views

Cisco Small Business Series Switches Session Credentials Replay (CVE-2021-34739)

A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This...

8.1CVSS8.1AI score0.01617EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/02/13 12:0 a.m.9 views

Cisco Small Business Series Switches Stacked Reload ACL Bypass (CVE-2024-20263)

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

7.2CVSS7.1AI score0.0045EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/02/10 12:0 a.m.6 views

Dell Networking Switches running Enterprise SONiC OS Log Information Disclosure Vulnerability

Dell Networking Switches running Enterprise SONiC OS is an open-source based network operating system from Dell, designed for data center and cloud computing scenarios, supporting a unified network architecture from edge to core to cloud. A log information disclosure vulnerability exists in Dell...

8CVSS6.3AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 4:9 a.m.16 views

CVE-2021-40866

Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the disabled by default /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8....

9.8CVSS7.3AI score0.01756EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/06 4:6 a.m.28 views

CVE-2021-40867

Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in e.g., behind the same NAT device, or already in possession of a foothold on an admin'...

7.8CVSS7.1AI score0.01401EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/02/05 11:56 a.m.10 views

CVE-2024-7695

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service atta...

8.7CVSS7.5AI score0.00701EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.9 views

Western Telematic NPS Series、DSM Series和CPM Series 安全漏洞

Western Telematic NPS Series and others are products of Western Telematic, Inc.Western Telematic NPS Series is a series of network power switches.Western Telematic DSM Series is a series of console servers. Western Telematic CPM Series is a series of console servers. A security vulnerability exis...

6.5CVSS6.6AI score0.00408EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/30 5:15 a.m.5 views

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS, versions prior to 4.4.1 and 4.2.3, contains an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

4.9CVSS5.8AI score0.00331EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/30 5:15 a.m.36 views

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS, versions prior to 4.4.1 and 4.2.3, contains an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

8CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/30 4:14 a.m.65 views

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS are affected by an Insertion of Sensitive Information into Log File vulnerability in versions prior to 4.4.1 and 4.2.3. The described impact is information exposure via remote access by a high-privilege attacker. The Connected documents indicat...

8CVSS7.5AI score0.00331EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/30 4:14 a.m.41 views

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS, versions prior to 4.4.1 and 4.2.3, contains an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

8CVSS0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/30 4:14 a.m.10 views

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS, versions prior to 4.4.1 and 4.2.3, contains an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

8CVSS7.5AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.9 views

Dell Networking Switches running Enterprise SONiC 日志信息泄露漏洞

Dell Networking Switches running Enterprise SONiC OS is an open-source based network operating system from Dell, designed for data center and cloud computing scenarios, supporting a unified network architecture from edge to core to cloud. A log information disclosure vulnerability exists in Dell...

8CVSS6.1AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/29 7:42 a.m.6 views

CVE-2024-7695 Out-of-bounds Write Vulnerability

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service atta...

8.7CVSS7.5AI score0.00701EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.6 views

Moxa PT Switches 安全漏洞

MOXA PT-7828 and others are products of Moxa China.MOXA PT-7828 is a managed rack-mount Ethernet switch.MOXA PT-G503 is a series of Layer 2 managed switches.MOXA PT-7728 is a switches. A security vulnerability exists in Moxa PT Switches that stems from insufficient validation of input...

8.7CVSS9.2AI score0.00701EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/29 12:0 a.m.5 views

PT-2025-3693 · Moxa · Eds-405A Series +47

Name of the Vulnerable Software and Affected Versions: Multiple network switches affected versions not specified Description: The issue is caused by insufficient input validation, allowing data to be written to memory outside the bounds of the buffer. This could result in a denial-of-service...

8.7CVSS6.8AI score0.00701EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.11 views

The vulnerability of microprogrammed software in PLANET Technology switches arises from the failure to take measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of PLANET Technology’s microprogrammed software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious HTTP request...

10CVSS8.6AI score0.02341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.9 views

The vulnerability of microprogrammed software in PLANET Technology switches, related to a countable loss of significance, allows attackers to trigger a service failure.

The vulnerability of PLANET Technology’s microprogrammed software is related to a countable degree of significance loss. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through a specially created malicious HTTP request...

5.3CVSS8AI score0.00614EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:0 a.m.10 views

The vulnerability of the Login Message function in the microprogrammed industrial Ethernet switches Moxa MGate allows a attacker to perform XSS attacks.

The vulnerability of the Login Message function in the microprogrammed industrial Ethernet switches Moxa MGate relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.1CVSS5.4AI score0.00292EPSS
SaveExploits0References2Affected Software3
Rows per page
Query Builder