HPESBNW05060 rev.1 - HPE Telco Network Function Virtualization Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Multiple Vulnerabilities, Unauthorized Remote Access, memory corruption, Buffer Overflow, Input Validation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Network Function Virtualization Orchestrator v7.6.0 or bel...

EUVD-2018-18814

Malware in sbrugna...

[SECURITY] Fedora 42 Update: libtpms-0.10.1-1.fc42

A library providing TPM functionality for VMs. Targeted for integration into Qemu...

HPESBNW04843 rev.1 - HPE Telco Network Function Virtualization Orchestrator Software, Multiple Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution, Bypass Security Restrictions, Server-Side Request Forgery SSRF; Remote: Access Restriction Bypass, Arbitrary Code Execution, Authorized User, Code Execution, Denial of Service DoS, Disclosure of Information, memory corruption SUPPORTED...

CISCO-SA-20190807-NFV

creationtimestamp| type| source ---|---|--- 2024-12-17 09:00:35+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342676998555 2024-12-17 09:00:37+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342840112322...

PT-2024-34550 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open 5GS version 2.7.1 Description: The issue allows a remote attacker to cause a denial of service via the Network Function Virtualizations NFVs such as the User Plane Function UPF and the Session Management Function SMF, during the Packet...

The vulnerability of the input/output function in the next-generation software for Cisco Enterprise NFV Infrastructure Software (NFVIS), which allows a hacker to enhance their privileges

The vulnerability of the input/output function in the next-generation software for Cisco Enterprise NFV Infrastructure Software NFVIS is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by sending API calls from a virtual...

Cisco Enterprise NFV Infrastructure Software 安全漏洞

Cisco Enterprise NFV Infrastructure Software is a set of NVF infrastructure software platform from Cisco USA. The platform enables full lifecycle management of virtualization services through a central orchestrator and controller.Cisco Enterprise NFV Infrastructure Software is vulnerable to...

The vulnerability of the TACACS authentication system in Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a perpetrator to increase their privileges.

The vulnerability of the TACACS authentication system in Cisco Enterprise NFV Infrastructure Software NFVIS relates to bypassing authentication using an alternative username. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the level of an administrator...

Cisco Enterprise NFV Infrastructure Software 操作系统命令注入漏洞

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. A command injection vulnerability exists in Cisco Enterprise NFV...

CVE-2021-22299

There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...

Cisco Enterprise NFV Infrastructure Software (NFVIS)跨站脚本漏洞

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. A cross-site scripting vulnerability exists in the web management interface ...

Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. A path traversal vulnerability exists in Cisco Enterprise NFV Infrastructure...

The vulnerability of the CLI component of Cisco Enterprise NFV Infrastructure Software allows a attacker to gain access to the basic operating system and rewrite or read any files they desire.

The vulnerability of the CLI component of Cisco Enterprise NFV Infrastructure Software exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a attacker to gain access to the underlying operating system and overwrite or read...

The vulnerability of Cisco Enterprise NFV Infrastructure Software (NFVIS) lies in errors during the validation of input data in the file system commands of NFVIS. This allows a malicious actor to re-record any files in the operating system of the vulnerable device.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS is related to errors in checking input data within the file system commands of NFVIS. Exploiting this vulnerability could allow a malicious actor to re-write any files in the operating system of the vulnerable device...

The vulnerability in the software infrastructure of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to obtain the administrator password.

The vulnerability of Cisco Enterprise NFV Infrastructure Software’s web portal software relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to obtain administrator passwords remotely...

The vulnerability of the remote access system for the Virtual Network Computing software infrastructure of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a hacker to increase their privileges.

The vulnerability of the remote access system of Cisco Enterprise NFV Infrastructure Software NFVIS is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker operating remotely to increase their privileges...

The vulnerability in the software infrastructure of Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges...

Cisco Enterprise NFV Infrastructure Software Arbitrary File Read Vulnerability (CNVD-2019-38851)

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. An arbitrary file read vulnerability exists in Cisco Enterprise NFV...

Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability (CNVD-2019-38848)

Cisco Enterprise NFV Infrastructure Software is a lightweight virtualization platform that integrates complete VM lifecycle management, monitoring, device programmability, and service chaining in one installable package. A command injection vulnerability exists in the web portal of Cisco Enterpri...