CVE-2023-39394

Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified...

PT-2023-26922 · Unknown · Wifienhance

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the ar...

ScienceLogic SL1 Command Execution Vulnerability (CNVD-2023-66410)

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A command execution vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from the ARP ping device tool feature failing to...

Huawei HarmonyOS elevation of privilege vulnerability (CNVD-2023-70290)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an elevation of privilege vulnerability that can be exploited by an attacker to cause arp lists to be modified...

CVE-2022-48580

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

Command injection

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

CVE-2022-48580

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

CVE-2022-48580

Summary: CVE-2022-48580 describes a command injection vulnerability in the ARP ping device tool feature of ScienceLogic SL1. The root cause is unsanitized user-controlled input that is passed directly to a shell command, enabling arbitrary commands to run on the underlying OS. Impact (as stated):...

CVE-2022-48580

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

July 26, 2023—KB5028254 (OS Build 22621.2070) Preview

None None...

Cisco Nexus Operating System Address Resolution Protocol Denial of Service (CVE-2015-4323)

"Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.30ZN0.9 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501410; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/12/25"; scriptcveid"CVE-2015-4323";...

Cisco NX-OS Software Anycast Gateway Invalid ARP (CVE-2020-3174)

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol ARP entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper...

Cisco NX-OS Malformed ARP Header Denial of Service (CVE-2015-6277)

The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.21SV31.4, Nexus 3000 devices 7.30ZD0.47, Nexus 4000 devices 4.12E1, Nexus 9000 devices 7.30ZD0.61, and MDS 9000 devices 7.00HSK0.353 and SAN-OS NX-OS on MDS 9000 devices 7.00HSK0.353 allows remote attackers to cause...

July 25, 2023—KB5028245 (OS Build 22000.2245) Preview

None None...

Juniper Junos OS Vulnerability (JSA69502)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69502 advisory. - A Denial of Service DoS vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast...

CVE-2023-31190

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which t...

Authentication flaw

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which t...

CVE-2023-31190 Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Specifically, the firmware update procedure ignores and does not check the validity of the TLS certificate of the HTTPS endpoint from which t...

arp-bolts.com Cross Site Scripting vulnerability OBB-3502405

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-5377 · D Link · D-Link Di-7200Gv2

Name of the Vulnerable Software and Affected Versions: D-Link DI-7200G V2 version 21.04.09E1 Description: The issue is related to a buffer overflow in the arp sys.asp component of the D-Link DI-7200G V2 router's firmware when processing the zn jb parameter. This can allow a remote attacker to...