Lucene search
K

49 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:37 p.m.2 views

CVE-2023-50477

An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js...

9.8CVSS7.3AI score0.01074EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2014-6819

Malware in sbrugna...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2008-5341

Malware in sbrugna...

9.3CVSS6.4AI score0.03176EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2023/12/21 11:15 a.m.3 views

CVE-2023-50477

An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js...

9.8CVSS7.3AI score0.01074EPSS
Exploits0References3
OSV
OSV
added 2023/12/21 11:15 a.m.14 views

CVE-2023-50477

An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js...

9.8CVSS7.3AI score0.01074EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/12/21 12:0 a.m.1 views

nOS Client Security Vulnerability

nOS Client is a blockchain-powered virtual operating system from nOS, Inc. A security vulnerability exists in nOS Client version 0.6.6, which stems from a vulnerability that allows remote attackers to escalate privileges via getRPCEndpoint.js...

9.8CVSS7.2AI score0.01074EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.3 views

PT-2023-31576 · Unknown · Nos Client

Name of the Vulnerable Software and Affected Versions: nos client version 0.6.6 Description: An issue was discovered in the nos client, allowing remote attackers to escalate privileges via the getRPCEndpoint.js file. Recommendations: For nos client version 0.6.6, consider disabling the...

9.8CVSS9.5AI score0.01074EPSS
Exploits0References7
CVE
CVE
added 2023/12/21 12:0 a.m.42 views

CVE-2023-50477

Summary: The CVE-2023-50477 issue affects the nos client v0.6.6, enabling remote privilege escalation via the getRPCEndpoint.js component. The NVD entry lists a critical CVSS 3.1 score of 9.8 (network attack, no user interaction, high impact on confidentiality, integrity, and availability). Conne...

9.8CVSS9.5AI score0.01074EPSS
Exploits0References2Affected Software1
Openbugbounty
Openbugbounty
added 2023/06/24 12:2 p.m.16 views

nos-taureaux.auriva-elevage.fr Cross Site Scripting vulnerability OBB-3463829

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.15 views

Security Bulletin: IBM Switches flood Fibre Channel-over-Ethernet (FCoE) data frame out of every port if destination address is not in MAC table (CVE-2013-0570)

Summary IBM System Networking switches that are capable of Fiber Channel over Ethernet FCoE will flood FCoE data frames with unknown MAC addresses to all ports on the switch. Remediation for this vulnerability consists of updating the IBM Networking OperatingSystem NOS running on these switches t...

5.3CVSS5AI score0.00166EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 10:21 p.m.23 views

Security Bulletin: Vulnerability in OSPFv2 Routing Protocol Used in IBM System Networking Ethernet Switches (CVE-2013-5385)

Abstract Many IBM System Networking Ethernet switches use the OSPFv2 routing protocol, which has an ambiguity that can be exploited to allow network traffic to be black-holed and/or redirected. Remediation for this vulnerability consists of updating the IBM Networking Operating System NOS running...

8.5CVSS6AI score0.04651EPSS
Exploits0Affected Software6
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/26 10:21 p.m.46 views

Security Bulletin: Vulnerability in Transport Layer Security Protocol Used in IBM System Networking Ethernet Switches (CVE-2011-3389)

Abstract Earlier versions of the Transport Layer Security TLS protocol are affected by a publicly disclosed vulnerability that could allow information disclosure if an attacker is carrying out a man-in-the-middle attack. Customers can avoid the vulnerability by following workarounds recommended b...

4.3CVSS7.1AI score0.03832EPSS
Exploits4Affected Software6
Openbugbounty
Openbugbounty
added 2017/09/12 6:59 p.m.14 views

newsletters.nos.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-293779 Description| Value ---|--- Affected Website:| newsletters.nos.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

6.7AI score
Exploits0
Broadcom
Broadcom
added 2017/06/23 12:0 a.m.12 views

BSA-2017-332

Security Advisory ID : BSA-2017-332 Component : IBM JDK Revision : 3.0: Final IBM JDK versions 6.0.16.45, 7.0.10.5, 7.1.4.5, and 8.0.4.5 correct a security issue. IBMSDK, Java Technology Edition is vulnerable XML External Entity Injection XXE error when processing XML data. A remote attacker coul...

8.2CVSS7AI score0.00923EPSS
Exploits0
n0where
n0where
added 2017/06/15 5:14 a.m.27 views

Open Source Full Featured Network Operating System: OpenSwitch

Open Source Full Featured Network Operating System OpenSwitch provides a fully-featured L2/L3 control plane stack, traditional and programmatic, declarative control plane. The 24×7 nature of global digital economy and the explosion of data have changed how we think about data center networking...

7.5AI score
Exploits0References4
hackapp
hackapp
added 2016/04/01 9:17 a.m.8 views

NOS - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application NOS published at the 'play' market has multiple vulnerabilities...

0.2AI score
Exploits0References1Affected Software1
NVD
NVD
added 2014/10/11 1:55 a.m.11 views

CVE-2014-6941

The NOS Alive aka pt.optimus.optimusalive2011 application 5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00134EPSS
Exploits0References3
Prion
Prion
added 2014/10/11 1:55 a.m.16 views

Information disclosure

The NOS Alive aka pt.optimus.optimusalive2011 application 5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2014/10/11 1:0 a.m.31 views

CVE-2014-6941

CVE-2014-6941 concerns the NOS Alive Android app (version 5.1) failing to verify X.509 certificates from SSL servers. The root cause is insecure TLS certificate validation, which allows a man-in-the-middle to spoof servers and exfiltrate sensitive information via a crafted certificate. Documented...

5.4CVSS6AI score0.00134EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2014/10/11 1:0 a.m.16 views

CVE-2014-6941

The NOS Alive aka pt.optimus.optimusalive2011 application 5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00134EPSS
Exploits0References3
Rows per page
Query Builder