Lucene search
+L

149 matches found

OSV
OSV
added 2020/12/24 4:15 p.m.7 views

CVE-2020-27719

On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...

6.1CVSS6.3AI score0.00757EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/02 12:00 a.m.14 views

F5 BIG-IP Cross-Site Scripting Vulnerability (CNVD-2020-61639)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in the configuration tool in F5 BIG-IP. An attacker could exploit this vulnerabili...

6.1CVSS6.5AI score0.01981EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:00 a.m.28 views

Rockwellautomation Micrologix Missing Authentication for Critical Function

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

7.8CVSS2.6AI score0.04335EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2019/08/01 12:00 a.m.96 views

Cisco Catalyst 3850 Series Device Manager 3.6.10E Cross Site Request Forgery

Product : Catalyst 3850 Series Device Manager Version : 3.6.10E Date: 01.08.2019 Vendor Homepage: https://www.cisco.com Exploit Author: Alperen Soydan Description : The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify...

0.4AI score
SaveExploits0
NVD
NVD
added 2019/05/22 8:29 p.m.26 views

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

8.2CVSS8.2AI score0.0125EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/05/22 7:40 p.m.49 views

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

8.2AI score0.0125EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2019/05/22 7:40 p.m.7 views

CVE-2019-6820

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

5.8AI score0.0125EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.20 views

Rockwell Automation/Allen-Bradley Multiple Devices Authentication Bypass (ICSA-18-310-02)

Binary data 720141.prm...

8.6CVSS7.3AI score0.04335EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.8 views

Siemens SIPLUS NET CP443-1 Communications Adapter Detection

Binary data 750305.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:00 a.m.20 views

Siemens SIPLUS NET CP443-1 ADVANCED Communications Adapter Detection

Binary data 750306.prm...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/02/02 12:00 a.m.53 views

ABB IP Configuration Tool Detection (Windows SMB Login)

Detects the installed version of ABB IP Configuration Tool for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0References1
NVD
NVD
added 2018/12/28 3:29 p.m.26 views

CVE-2018-15333

On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps...

5.5CVSS5.5AI score0.00387EPSS
SaveExploits0References3
NVD
NVD
added 2018/12/07 2:29 p.m.21 views

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

8.6CVSS8.6AI score0.04335EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/12/07 2:00 p.m.30 views

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

8.6AI score0.04335EPSS
SaveExploits0References2
CVE
CVE
added 2018/12/07 2:00 p.m.119 views

CVE-2018-17924

CVE-2018-17924 affects Rockwell Automation MicroLogix 1400 Controllers (Series A/B/C) and 1756 ControlLogix EtherNet/IP Communications Modules. The vulnerability allows an unauthenticated remote actor to initiate a CIP connection and push a new IP configuration, potentially disrupting system comm...

8.6CVSS8.5AI score0.04335EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:00 a.m.31 views

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K00363258)

A local file vulnerability exists in the BIG-IP Configuration utility that exposes files containing F5-provided data only, and do not include configuration data, proxied traffic, or other potentially sensitive customer data. CVE-2018-5525 Impact Authenticated users may be able to retrieve files...

4.3CVSS5.1AI score0.00995EPSS
SaveExploits0References2
Citrix
Citrix
added 2016/09/21 12:00 a.m.12 views

XenServer 6.5 - VM IP configuration switches back to DHCP

XenServer 6.5 - VM IP configuration switches back to DHCP...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2016/06/21 12:00 a.m.15 views

Cannot change the IP address of the XenMobile server on VMware

Cannot change the IP address of the XenMobile server on VMWare. This mostly arises in the following scenario. Customer clones a XenMobile Server for a cluster, then changes the IP address of the clone in the CLI, reboots the cloned XenMobile Server and the IP reverts back to the IP of the origina...

7.1AI score
SaveExploits0
NVD
NVD
added 2015/05/18 3:59 p.m.19 views

CVE-2014-8384

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request...

9.4CVSS6.7AI score0.03235EPSS
SaveExploits3References3
ATTACKERKB
ATTACKERKB
added 2015/05/18 3:59 p.m.4 views

CVE-2014-8384

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request...

9.4CVSS5.7AI score0.03235EPSS
SaveExploits3References4
Rows per page
Query Builder