Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm Chip WLAN module that originate...

PT-2023-13277 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing NMF frames. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-3792 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows remote attackers to escalate privileges on affected installations. Although authentication is required to exploit this issue, the existin...

PT-2023-3790 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: The issue is related to an unrestricted file upload vulnerability in the UpLoadServlet class, which can be exploited by remote attackers to execute arbitra...

PT-2023-3788 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows remote attackers to bypass authentication on affected installations of the NETGEAR ProSAFE Network Management System. The specific flaw...

PT-2023-3794 · NetGear · Netgear Prosafe Network Management System

Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System versions affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue,...

The vulnerability of the Admin Configuration sub-component of the Oracle Communications Convergence component in the Oracle Communications Applications network management and organization software package allows a attacker to execute arbitrary code.

The vulnerability of the Admin Configuration sub-component of the Oracle Communications Convergence component in the Oracle Communications Applications network management and organization software package is related to insufficient validation of input data. Exploiting this vulnerability could all...

CVE-2022-38066

An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response can lead to arbitrary command execution. An attacker can send a network request to trigger this vulnerability...

The vulnerability of the software implementation of the SNMP protocol for the Cisco Firepower Management Center (FMC) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SNMP protocol-based software for managing Cisco Firepower Management Centers involves deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by sending GET requests...

The vulnerability of the PFE (evo-pfemand) control demon in JunOS Evolved operating systems allows a intruder to trigger a service failure.

The vulnerability of the PFE evo-pfemand control daemon for JunOS Evolved involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions by executing arbitrary commands through the command line interface, or by sending...

CVE-2023-22401

An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon aftmand of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. On the PTX10008 and PTX10016 platforms running Junos ...

The vulnerability of the implementation of the Simple Network Management Protocol (SNMP) for microprogrammable network interface controllers in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the implementation of the Simple Network Management Protocol SNMP for micro-programmed network interface controllers in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD exists due to insufficient validation of input data. Exploiting this...

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers, related to errors in request processing, allows a perpetrator to disclose protected information.

The vulnerability of the Simple Network Management Protocol SNMP implementation on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers is related to errors in handling requests. Exploiting this vulnerability can allow a malicious actor to disclose protected...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2022-2938)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2022-2912)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-46670

Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an...

The vulnerability of the SNMP (Simple Network Management Protocol) implementation in the RouterOS operating system of MikroTik allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the SNMP Simple Network Management Protocol protocol in the RouterOS operating system of MikroTik routers lies in the ability to read data beyond the buffer boundaries in memory during the processing of the u32id key. Exploiting this vulnerability allows...

CVE-2022-45315

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows attackers to execute arbitrary code via a crafted packet...

MikroTik RouterOS 缓冲区错误漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in PCs to enable them to provide router functionality. A buffer error vulnerability exists in MikroTik RouterOS versions prior to v7.6, which stems from the inclusion o...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...