18 matches found
CVE-2026-0383
CVE-2026-0383 : A vulnerability in Brocade Fabric OS allows an authenticated, local attacker with privileges to access the Bash shell and read insecurely stored files, including command history. Affected releases include Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a, and 10.0.0. Remediation/m...
CVE-2026-0383
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...
Broadcom Brocade Fabric OS 安全漏洞
Broadcom Brocade Fabric OS is an embedded operating system used in switches and routers by Broadcom Corporation. There is a security vulnerability in Broadcom Brocade Fabric OS. This vulnerability stems from local attackers with access to the Bash shell being able to access the content of...
CVE-2009-4011
dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...
F5 BIG-IP iHealth Tool Privilege Bypass Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A privilege bypass vulnerability exists in the BIG-IP's iHealth tool a module of the TMOS Shell. The vulnerability occurs...
F5 Networks BIG-IP : BIG-IP tmsh vulnerability (K000154647)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K000154647 advisory. A vulnerability exists in the iHealth utility of the TMOS Shell tmsh that may allow an...
EUVD-2009-3982
Malware in sbrugna...
K61002104: BIG-IP AFM and PEM TMUI XSS vulnerability CVE-2019-6639
Security Advisory Description Undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting XSS issue. This is a control plane issue only and is not accessible from the data plane. The attack requires a malicious resource administrator to store the...
CVE-2009-4011
dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...
CVE-2009-4011
dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...
CVE-2009-4011
dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...
CVE-2009-4011
dtc-xen is a SOAP daemon used for Xen VM management. The CVE-2009-4011 issue is a race condition in dtc-xen 0.5.x before 0.5.4, caused by mishandling of concurrent access to shared resources, enabling an attacker to gain a bash shell as the xenXX user on dom0 and potentially reuse an already open...
CVE-2009-4011
Removed by vendor...
PT-2019-6508
Name of the Vulnerable Software and Affected Versions dtc-xen versions 0.5.x before 0.5.4 Description The issue is related to a race condition that could allow an attacker to gain bash access as the xenXX user on the dom0, potentially reusing an already opened VPS console. Recommendations For...
CVE-2009-4011: Concurrent Execution using Shared Resource with Improper Synchronization
dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console...
F5 Networks BIG-IP : BIG-IP AFM and PEM TMUI XSS vulnerability (K61002104)
Undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting XSS issue. This is a control plane issue only and is not accessible from the data plane. The attack requires a malicious resource administrator to store the XSS. CVE-2019-6639 Impact A...
PT-2016-3752
Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP Analytics versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP APM versions 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1 F5 BIG-IP ASM...
F5 Networks BIG-IP : OpenSSL vulnerability (K17248)
The Cryptographic Message Syntax CMS implementation in crypto/cms/cmsasn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, a...