Lucene search
+L

82 matches found

CNVD
CNVD
added 2018/01/19 12:00 a.m.10 views

Cisco Small Business 300 and 500 Series HTTP Response Splitting Vulnerability

Cisco 350 Series Managed Switches and so on are the United States Cisco Cisco company's switch equipment.Cisco Small Business Managed Switches software is running in which a set of switch management software. An HTTP response splitting vulnerability exists in the web framework of the Cisco Small...

6.1CVSS7.6AI score0.00833EPSS
SaveExploits0References1
Prion
Prion
added 2018/01/18 6:29 a.m.18 views

Cross site scripting

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

4.3CVSS6AI score0.00871EPSS
SaveExploits0References2Affected Software85
NVD
NVD
added 2018/01/18 6:29 a.m.22 views

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

6.1CVSS6.1AI score0.00871EPSS
SaveExploits0References2
Prion
Prion
added 2018/01/18 6:29 a.m.24 views

Input validation

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

5.8CVSS6.6AI score0.00833EPSS
SaveExploits0References1Affected Software85
NVD
NVD
added 2018/01/18 6:29 a.m.27 views

CVE-2017-12308

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

6.1CVSS6.6AI score0.00833EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/01/18 6:00 a.m.29 views

CVE-2017-12308

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

6.6AI score0.00833EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2018/01/18 6:00 a.m.15 views

CVE-2017-12308

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation ...

7.5AI score0.00833EPSS
SaveExploits0References1
CVE
CVE
added 2018/01/18 6:00 a.m.76 views

CVE-2017-12308

CVE-2017-12308 affects Cisco Small Business 300/500 Series Managed Switches. The issue is an HTTP response splitting vulnerability caused by insufficient input validation in the web framework, enabling an unauthenticated remote attacker to coax a user into injecting code or to access browser-base...

6.1CVSS6.6AI score0.00833EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/01/18 6:00 a.m.30 views

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

6.1AI score0.00871EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2018/01/18 6:00 a.m.14 views

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

6.1AI score0.00871EPSS
SaveExploits0References2
CVE
CVE
added 2018/01/18 6:00 a.m.79 views

CVE-2017-12307

CVE-2017-12307 affects Cisco Small Business 300/500 Series Managed Switches (including 300/500 Series, 350, 350X, 550X, ESW2) where the web interface’s input validation can be bypassed to trigger a reflected XSS. The root cause is insufficient input validation in parameters passed to the web serv...

6.1CVSS6AI score0.00871EPSS
SaveExploits0References2Affected Software1
Cisco
Cisco
added 2018/01/17 4:00 p.m.31 views

Cisco Small Business 300 and 500 Series Managed Switches Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

6.1CVSS0.9AI score0.00871EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/10/03 12:00 a.m.10 views

Cisco Small Business 500 Series Stackable Managed Switches Detection (SNMP)

This script performs SNMP based detection of Cisco Small Business 500 Series Stackable Managed Switches. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7.3AI score
SaveExploits0
NVD
NVD
added 2017/09/21 5:29 a.m.20 views

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

6.8CVSS6.4AI score0.01395EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2017/09/21 5:00 a.m.28 views

CVE-2017-6720

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

6.4AI score0.01395EPSS
SaveExploits0References2
CVE
CVE
added 2017/09/21 5:00 a.m.94 views

CVE-2017-6720

The CVE-2017-6720 issue affects Cisco Small Business Managed Switches (300, 500, 350, 350X, 550X series and ESW2 line) where the SSH subsystem mishandles SSH messages, allowing an authenticated remote attacker to trigger a reload and cause a DoS. Root cause: improper processing of SSH connections...

6.8CVSS6.4AI score0.01395EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2017/09/21 12:00 a.m.9 views

Cisco Small Business Managed Switches Denial of Service Vulnerability

Cisco Small Business 300 Series Managed Switches and so on are the switch equipment of the American Cisco Cisco company. the Secure Shell SSH subsystem is one of the data encryption transmission subsystems. A denial of service vulnerability exists in the SSH subsystem in several Cisco products,...

6.8CVSS6.8AI score0.01395EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/09/20 4:00 p.m.46 views

Cisco Small Business Managed Switches Denial of Service Vulnerability

A vulnerability in the Secure Shell SSH subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service DoS condition. The vulnerability is due to improper processing of SSH...

7.7CVSS6.5AI score0.01395EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/02/28 12:00 a.m.6 views

Red Lion Controls Sixnet-Managed Industrial Switches and Stride-Managed Ethernet Switches Hard-Coded Encryption Key Vulnerability

Red Lion Controls Sixnet-Managed Industrial Switches and Stride-Managed Ethernet Switches are both industrial Ethernet managed switches from Red Lion Controls, USA. A hard-coded encryption key vulnerability exists in Red Lion Controls Sixnet-Managed Industrial Switches version 5.0.196 and earlier...

6.8AI score
SaveExploits0References1
ICS
ICS
added 2016/03/06 7:00 a.m.43 views

GE MultiLink Series Hard-coded Credential Vulnerability

OVERVIEW GE has identified a hard-coded credential vulnerability in GE’s MultiLink series managed switches. GE has produced new firmware versions to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following MultiLink products are affected: GE ML8...

10CVSS9.9AI score0.03219EPSS
SaveExploits0References10
Rows per page
Query Builder