10 matches found
CVE-2026-20182
May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The section of this advisory includes Show...
CVE-2020-24034
Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sessid, nonce, and ha1 values inside of the serialized session cookie, an attacker may...
EUVD-2025-13258
Malicious code in bioql PyPI...
SonicWall SRA/SMA SQL注入漏洞
Sonicwall SRA and Sonicwall SMA are both security protection products for enterprise managed security access from SonicWall USA. SonicWallSRA/SMA suffers from a SQL injection vulnerability that allows a remote, unauthenticated attacker to execute SQL statements to steal sensitive internal account...
Sagemcom F@ST 5280 routers elevation of privilege vulnerability
Sagemcom F@ST 5280 routers is a router product. A deserialization vulnerability exists in firmware version 1.150.61 in the Sagemcom F@ST 5280 routers, which originates when any authenticated user performs an elevation of privilege on any other user. An attacker could exploit the vulnerability to...
CVE-2016-9204
A vulnerability in the Cisco Intercloud Fabric ICF Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. Affected Products: Cisco Nexus 1000V InterCloud is affected. More Information: CSCus99379. Known Affected Releases: 2.21...
Design/Logic Flaw
A vulnerability in the Cisco Intercloud Fabric ICF Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. Affected Products: Cisco Nexus 1000V InterCloud is affected. More Information: CSCus99379. Known Affected Releases: 2.21...
CVE-2016-9204
A vulnerability in the Cisco Intercloud Fabric ICF Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. Affected Products: Cisco Nexus 1000V InterCloud is affected. More Information: CSCus99379. Known Affected Releases: 2.21...
CVE-2016-9204
CVE-2016-9204 relates to Cisco Intercloud Fabric Director. The vulnerability stems from static credentials for an internal account, enabling an unauthenticated, remote attacker to connect to internal services within the Cisco Nexus 1000V InterCloud deployment. Affected releases include 2.2(1). Th...
Cisco Intercloud Fabric Director Static Credentials Vulnerability
A vulnerability in the Cisco Intercloud Fabric ICF Director could allow an unauthenticated, remote attacker to connect to internal services with an internal account. The vulnerability is due to static credentials for an internal account. An attacker could exploit this vulnerability by using the...