Lucene search
+L

2848 matches found

Cisco
Cisco
added 2026/05/06 4:00 p.m.26 views

Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco 350 Series Managed Switches SG350 and Cisco 350X Series Stackable Managed Switches SG350X firmware could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

7.7CVSS5.9AI score0.00389EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/09 12:00 a.m.19 views

Juniper Networks Junos OS EX/QFX 代码问题漏洞

Juniper Networks Junos OS EX/QFX is a type of switch produced by Juniper Networks. This product provides dedicated electrical signal pathways between any two network nodes that are connected as access switches. There were code-related vulnerabilities in versions of Juniper Networks Junos OS EX/QF...

7.1CVSS5.8AI score0.00165EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/06 4:58 p.m.12 views

CVE-2026-34769

A flaw was found in Electron, a framework for building desktop applications. This vulnerability arises from an undocumented commandLineSwitches webPreference that allows arbitrary command-line switches to be appended to the renderer process. A remote attacker could exploit this by providing...

8.8CVSS6.2AI score0.00295EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/04 12:16 a.m.10 views

CVE-2026-34769

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Ap...

8.8CVSS0.00295EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/04/04 12:00 a.m.17 views

Electron 安全漏洞

Electron is an open-source JavaScript framework developed by users for creating cross-platform desktop applications. This framework is based on Node.js and Chromium, allowing the development of cross-platform desktop applications using HTML and CSS. There are security vulnerabilities in versions ...

7.8CVSS5.9AI score0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/03 11:33 p.m.4 views

CVE-2026-34769 Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Ap...

7.7CVSS5.9AI score0.00295EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/03 11:33 p.m.16 views

CVE-2026-34769 Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Ap...

7.7CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/03 11:33 p.m.36 views

CVE-2026-34769 Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Ap...

7.7CVSS0.00295EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/03 11:33 p.m.6 views

CVE-2026-34769

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8, an undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Ap...

8.8CVSS5.9AI score0.00295EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/04/03 11:33 p.m.117 views

CVE-2026-34769

CVE-2026-34769 (Electron) affects Electron versions prior to 38.8.6, 39.8.0, 40.7.0, and 41.0.0-beta.8. An undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. When apps construct webPreferences from external or untrusted i...

8.8CVSS5.9AI score0.00295EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/03 10:49 p.m.36 views

CVE-2017-20234 GarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions a...

9.8CVSS0.00455EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/03 9:59 p.m.6 views

CVE-2016-15058

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is...

8.6CVSS5.9AI score0.00213EPSS
SaveExploits0References4
OSV
OSV
added 2026/04/03 2:39 a.m.8 views

GHSA-9WFR-W7MM-PC7F Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Impact An undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Apps that construct webPreferences by spreading untrusted configuration objects may inadvertently allow an attacker to inject switches that disable renderer...

7.7CVSS6AI score0.00295EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/04/03 2:39 a.m.6 views

Hidden Functionality

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Hidden Functionality via the commandLineSwitches webPreference. An attacker can inject arbitrary command-li...

8.8CVSS6AI score0.00295EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/03 2:39 a.m.11 views

Hidden Functionality

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Hidden Functionality via the commandLineSwitches webPreference. An attacker can inject arbitrary command-line switches into...

8.7CVSS6AI score0.00295EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/04/03 2:39 a.m.15 views

Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference

Impact An undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line. Apps that construct webPreferences by spreading untrusted configuration objects may inadvertently allow an attacker to inject switches that disable renderer...

8.8CVSS5.9AI score0.00295EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.16 views

PT-2026-29999

Name of the Vulnerable Software and Affected Versions Electron versions prior to 38.8.6, prior to 39.8.0, prior to 40.7.0, and prior to 41.0.0-beta.8. Description An undocumented commandLineSwitches webPreference allowed arbitrary switches to be appended to the renderer process command line...

8.8CVSS5.9AI score0.00295EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.12 views

PT-2026-30246

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is...

8.6CVSS5.9AI score0.00213EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.30 views

PT-2026-30258

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions a...

9.8CVSS5.9AI score0.00455EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/27 12:00 a.m.5 views

Cisco Nexus 3000 9000 Series Switches Intermediate System-to-Intermediate System DoS (cisco-sa-n39k-isis-dos-JhJA8Rfx)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in the Intermediate System-to-Intermediate System IS-IS feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode...

7.4CVSS5.9AI score0.00265EPSS
SaveExploits0References3
Rows per page
Query Builder