Cisco Data Center Network Manager Information Disclosure Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. An information disclosure vulnerability exists in the web-based management interfa...

Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM softwar...

The vulnerability of the command-line interface on NX-OS and FX-OS devices of Cisco’s networking operating systems allows attackers to disclose sensitive information.

The vulnerability of the command-line interfaces of NX-OS and FX-OS devices from Cisco involves incomplete verification of role-based access control RBAC. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by executing diagnostic commands with specially craft...

VulnCheck KEV: CVE-2016-10760

On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the pingipaddr parameter...

Command injection

The network diagnostic function ping in the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware 66.83.0.35 allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection...

CVE-2018-16217

The network diagnostic function ping in the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware 66.83.0.35 allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection...

CVE-2018-16217

The network diagnostic function ping in the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware 66.83.0.35 allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection...

Yealink Yeahlink Ultra-elegant IP Phone SIP-T41P Command Injection Vulnerability

Yealink Yeahlink Ultra-elegant IP Phone SIP-T41P is an IP phone from China Yealink. A command injection vulnerability exists in the network diagnostic feature of the Yealink Yeahlink Ultra-elegant IP Phone SIP-T41P using firmware version 66.83.0.35. The vulnerability arises from a network system ...

PT-2019-2293 · Cisco · Cisco Nx-Os +2

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software affected versions not specified Cisco NX-OS Software affected versions not specified Description: The issue is related to incomplete role-based access control RBAC verification in the implementation of a CLI diagnostic...

KLA11485 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A deni...

PT-2019-6112 · Netis · Netis Wf2419

Name of the Vulnerable Software and Affected Versions: Netis WF2419 versions V1.2.31805 through V2.2.36123 Description: The vulnerability is related to the implementation of the ping and tracert commands in the web interface of the Netis WF2419 router's firmware, which fails to neutralize special...

Rockwell Automation 9300-8EDM ENet Diagnostic Module Communications Adapter

Binary data 752973.prm...

Rockwell Automation 1794 - 16 Point 24V dc Diagnostic Input Module 1794-IB16D/A General Purpose Discrete I/O

Binary data 752608.prm...

Rockwell Automation 1798 - 4 Point Diagnostic 24V DC Input, Sink 1798-IB4D/A Adapter I/O accessed via proxy

Binary data 754537.prm...

Rockwell Automation 1794 - 16 Point 24V dc Diagnostic Output Module 1794-OB16D/A General Purpose Discrete I/O

Binary data 752609.prm...

Privilege Escalation

The ppc64-diag packages provide diagnostic tools for Linux on the 64-bit PowerPC platforms. The platform diagnostics write events reported by the firmware to the service log, provide automated responses to urgent events, and notify system administrators or connected service frameworks about the...

Plaintext Weak Encryption

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

Buffer Overflow Vulnerability in MegaPing Software

MegaPing is a windowed, multifunctional network diagnostic tool that includes most of the Internet utilities. A buffer overflow vulnerability exists in the MegaPing software. An attacker can exploit the vulnerability to execute arbitrary code within the context of the application...

CVE-2018-18489

The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service HTTP service termination by modifying the packet size to be higher than the UI limit of 1472...

Medical Weed Dispensary Exposes Health Data for Thousands

A data breach at a medical marijuana dispensary company operating in Canada has sent the personal health privacy of about 34,000 patients up in smoke. An electronic medical record system used by Natural Health Services – a self-described “cannabinoid medical clinic that specializes in cannabis...