Lucene search
+L

105 matches found

Vulnrichment
Vulnrichment
•added 2026/09/18 9:32 a.m.•18 views

CVE-2026-15579

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...

8.8CVSS6.3AI score0.00442EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/18 9:32 a.m.•48 views

CVE-2026-15579

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...

8.8CVSS0.00442EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/18 9:32 a.m.•20 views

EUVD-2026-82861

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...

8.8CVSS6.3AI score0.00442EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 9:32 a.m.•50 views

CVE-2026-15579

Moxa Ethernet switches are affected by an out-of-bounds write vulnerability caused by improper validation of the username field length during Web login processing. A remote, unauthenticated attacker can submit a specially crafted overly long input , triggering a buffer overflow that crashes the a...

8.8CVSS6.3AI score0.00442EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•8 views

CVE-2026-15579: Out-of-bounds Write

An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length during Web login processing. This may allow a remote attacker to submit a specially crafted overly long input, triggering a buffer overflow that can cause the...

8.8CVSS6.3AI score0.00442EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/18 12:00 a.m.•11 views

PT-2026-95339

Name of the Vulnerable Software and Affected Versions Ethernet switches affected versions not specified Description An out-of-bounds write issue occurs during Web login processing due to improper validation of the username field length. A remote attacker can submit a specially crafted, overly lon...

8.8CVSS6AI score0.00442EPSS
SaveExploits0References5
NVD
NVD
•added 2025/10/23 2:15 p.m.•21 views

CVE-2025-1680

An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected...

0.00184EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/23 1:56 p.m.•42 views

CVE-2025-1680

An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected...

0.00184EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/23 1:51 p.m.•23 views

EUVD-2025-35687

Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s web service that could impact authenticated users interacting with the device’s web interface. This vulnerability is...

4.8CVSS5.7AI score0.00326EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•3 views

PT-2025-43518

Name of the Vulnerable Software and Affected Versions Moxa’s Ethernet switches affected versions not specified Description An authenticated administrative attacker can inject malicious scripts into the web service of affected devices, potentially impacting authenticated users interacting with the...

6.5CVSS5.9AI score0.00326EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•9 views

PT-2025-43519

Name of the Vulnerable Software and Affected Versions Moxa Ethernet switches affected versions not specified Description An acceptance of extraneous untrusted data with trusted data issue exists in Moxa’s Ethernet switches. This allows attackers with administrative privileges to manipulate HTTP...

4CVSS5.7AI score0.00184EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/23 12:00 a.m.•7 views

CVE-2025-1680: Acceptance of Extraneous Untrusted Data With Trusted Data

An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header into HTTP requests sent to an affected...

5.8AI score0.00184EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/23 12:00 a.m.•4 views

CVE-2025-1679: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s web service that could impact authenticated users interacting with the device’s web interface. This vulnerability is...

4.8CVSS6.1AI score0.00326EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/23 12:00 a.m.•16 views

Moxa Ethernet switches 安全漏洞

Moxa Ethernet switches is an industrial-grade network switch from Moxa Corporation of Taiwan, China. A security vulnerability exists in Moxa Ethernet switches, which originates from a stored cross-site scripting attack that could result in the loss of confidentiality and integrity of subsequent...

4.8CVSS6AI score0.00326EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2003-1497

Malware in sbrugna...

10CVSS6.4AI score0.02169EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2018-1078

Malware in sbrugna...

8.8CVSS7.8AI score0.00886EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2016-10145

Malware in sbrugna...

10CVSS8.2AI score0.01575EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-18180

Malicious code in bioql PyPI...

5.8CVSS6.5AI score0.00416EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/27 8:38 a.m.•39 views

CVE-2025-41653 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive...

7.5CVSS0.00594EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/27 8:38 a.m.•15 views

CVE-2025-41653 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive...

7.5CVSS7.1AI score0.00594EPSS
SaveExploits0References1
Rows per page
Query Builder