Lucene search
+L

2309 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/06 4:15 p.m.8 views

CVE-2026-20169

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient input validation of user-supplied data. An...

6.4CVSS5.9AI score0.0021EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/06 4:15 p.m.8 views

CVE-2026-20168 Cisco IoT Field Network Director Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This vulnerability is due to insufficient file access checks. An attacker could...

6.5CVSS5.8AI score0.00272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/06 4:15 p.m.10 views

CVE-2026-20169 Cisco IoT Field Network Director Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient input validation of user-supplied data. An...

6.4CVSS5.9AI score0.0021EPSS
SaveExploits0References1
Cisco
Cisco
added 2026/05/06 4:00 p.m.22 views

Cisco IoT Field Network Director Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco IoT Field Network Director Software could allow an authenticated, remote attacker to access files, execute commands, and cause denial of service DoS conditions on managed routers. For more information about these...

7.7CVSS5.9AI score0.00272EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/06 12:00 a.m.26 views

PT-2026-37651

Name of the Vulnerable Software and Affected Versions Cisco IoT Field Network Director affected versions not specified Description Insufficient file access checks in the web-based management interface allow an authenticated, remote attacker with low privileges to retrieve files they are not...

6.8CVSS6.7AI score0.00272EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.28 views

Cisco IoT Field Network Director 访问控制错误漏洞

The Cisco IoT Field Network Director is an end-to-end IoT management system developed by Cisco, Inc. This system offers features such as device management, asset tracking, and intelligent metering. There is an access control vulnerability present in the Cisco IoT Field Network Director. This...

7.7CVSS5.8AI score0.00272EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/06 12:00 a.m.28 views

PT-2026-37650

Name of the Vulnerable Software and Affected Versions Cisco IoT Field Network Director affected versions not specified Description Improper error handling in the web-based management interface allows an authenticated remote attacker with low privileges to cause a denial of service DoS condition o...

7.7CVSS7.1AI score0.00272EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.17 views

Cisco IoT Field Network Director 代码问题漏洞

Cisco IoT Field Network Director is an end-to-end IoT management system developed by Cisco, Inc. This system offers features such as device management, asset tracking, and intelligent metering. There is a code vulnerability in Cisco IoT Field Network Director, which stems from insufficient file...

6.5CVSS5.9AI score0.00272EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.25 views

Cisco IoT Field Network Director 命令注入漏洞

The Cisco IoT Field Network Director is an end-to-end IoT management system developed by Cisco, Inc. This system offers features such as device management, asset tracking, and intelligent metering. The Cisco IoT Field Network Director has a command injection vulnerability, which stems from...

6.4CVSS5.9AI score0.0021EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/05 12:00 a.m.9 views

Cisco UCS Director Remote Code Execution Vulnerability (regreSSHion) (cisco cisco-sa-openssh-rce-2024)

According to its self-reported version, Cisco UCS Director is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco UCS Directory due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after which th...

8.1CVSS7.6AI score0.99506EPSS
SaveExploits71References3
Positive Technologies
Positive Technologies
added 2026/05/04 12:00 a.m.33 views

PT-2026-37203

Name of the Vulnerable Software and Affected Versions Pelican versions 7.21.0 through 7.21.4 Pelican versions 7.22.0 through 7.22.2 Pelican versions 7.23.0 through 7.23.2 Pelican versions 7.24.0 through 7.24.1 Description A privilege escalation issue exists in the Web User Interface WebUI that...

9CVSS5.8AI score0.0032EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:00 a.m.8 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013134 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix possible NULL pointer dereference in mtkhwlrogetfdirall rulelocs is...

5.6AI score0.00205EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.11 views

CVE-2026-33779

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

8.3CVSS5.8AI score0.00121EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.10 views

EUVD-2026-21088

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

8.3CVSS5.9AI score0.00121EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/09 10:16 p.m.20 views

CVE-2026-33779

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

8.3CVSS0.00121EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:30 p.m.5 views

CVE-2026-33779

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

8.3CVSS5.9AI score0.00121EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/09 9:30 p.m.8 views

CVE-2026-33779 Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

8.3CVSS5.8AI score0.00121EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/09 9:30 p.m.33 views

CVE-2026-33779 Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

8.3CVSS0.00121EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/09 9:30 p.m.59 views

CVE-2026-33779

The CVE concerns Junos OS on SRX Series failing to properly verify the server certificate when provisioning to Security Director cloud, enabling a PITM to intercept traffic and access credentials and sensitive data. Affected Junos OS versions include all before 22.4R3-S9, 23.2 before 23.2R2-S6, 2...

8.3CVSS5.9AI score0.00121EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/09 12:00 a.m.23 views

PT-2026-31749

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

8.3CVSS5.9AI score0.00121EPSS
SaveExploits0References2
Rows per page
Query Builder