Path traversal

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...

CVE-2023-6032

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...

Schneider Electric Galaxy VS and Schneider Electric Galaxy VL Path Traversal Vulnerabilities

Schneider Electric Galaxy VS and Schneider Electric Galaxy VL are both products of Schneider Electric, France.Schneider Electric Galaxy VS is a power protection device for edge, small and medium-sized data centers, and other business-critical applications. Schneider Electric Galaxy VL is a power...

PT-2023-7003 · Galaxy Vs +1 · Galaxy Vs +1

Name of the Vulnerable Software and Affected Versions: Galaxy VL and Galaxy VS affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow a remote attacker to...

NULL Pointer Exception bug that can be used by a remote attacker

handleipv6IpForwarding in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. Products Confirmed Not Affected Brocade Fabri...

The vulnerability of the SNMPv3 software for Virtualize Spectrum virtualization allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SNMPv3 software for Virtualize Spectrum virtualization lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability in the web interface and command-line interface of the Cisco Email Security Appliance security system for Cisco AsyncOS operating systems allows a malicious user to execute arbitrary commands from the root user.

The vulnerability in the web interface and the command-line interface of the Cisco Email Security Appliance security system for Cisco AsyncOS operating systems is related to improper validation of the loaded configuration file for the SNMP protocol. Exploiting this vulnerability allows a maliciou...

The vulnerability of the User Management sub-component of the Oracle Communications Order and Service Management component of the Oracle Communications Applications software and management system allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the User Management sub-component of the Oracle Communications Order and Service Management component of the Oracle Communications Applications software and network management system is related to insufficient validation of input data. Exploiting this vulnerability could allo...

Siemens SINEC NMS Cross-Site Scripting Vulnerability

Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A cross-site scripting vulnerability exists in the Siemens SINEC NMS...

CVE-2023-35796

A vulnerability has been identified in SINEMA Server V14 All versions. The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting XSS attack that may lead...

Siemens SINEC NMS 安全漏洞

Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. The Siemens SINEC NMS suffers from an Incorrect Privilege Assignment...

Siemens SINEC NMS 跨站脚本漏洞

Siemens SINEC NMS is a network management system NMS from Siemens, Germany, that can be used 24/7 to centrally monitor, manage and configure industrial networks with tens of thousands of devices, including safety-related areas. A cross-site scripting vulnerability exists in the Siemens SINEC NMS...

PT-2023-6401 · Sinec Nms · Sinec Nms

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V2.0 Description: The issue arises from the improper sanitization of certain SNMP configuration data retrieved from monitored devices. This could allow an attacker with access to a monitored device to prepare a...

Siemens SINEMA Server 跨站脚本漏洞

Siemens SINEMA Server is a software from Siemens, Germany, developed specifically for industrial applications. It enables you to fully visualize and monitor your network. A cross-site scripting vulnerability exists in Siemens SINEMA Server V14 due to an affected application incorrectly clearing...

NETGEAR ProSAFE Network Management System (NMS) Detection

Binary data netgearnmsdetect.nbin...

Siemens Spectrum Power 7 Local Elevation of Privilege Vulnerability

Spectrum Power 7 provides the essential components of SCADA, communications and data modeling for control and monitoring systems. Application suites can be added to optimize network and generation management in all areas of energy management. A local elevation of privilege vulnerability exists in...

NETGEAR ProSAFE Network Management System Authentication Bypass (CVE-2023-38096)

Binary data netgearnmszdi-23-920.nbin...

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

SUSE CVE-2023-39362

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...

DEBIAN-CVE-2023-39362

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlyin...