CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2019-16301

An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual tenant network application org.onosproject.vtn, the host event listener does not handle the following event types: HOSTMOVED. In combination with other applications, this could lead to the absence of intended code...

CVE-2019-16299

An issue was discovered in Open Network Operating System ONOS 1.14. In the mobility application org.onosproject.mobility, the host event listener does not handle the following event types: HOSTADDED, HOSTREMOVED, HOSTUPDATED. In combination with other applications, this could lead to the absence ...

CVE-2019-16302

An issue was discovered in Open Network Operating System ONOS 1.14. In the Ethernet VPN application org.onosproject.evpnopenflow, the host event listener does not handle the following event types: HOSTMOVED, HOSTUPDATED. In combination with other applications, this could lead to the absence of...

Linux Open Network Operating System（ONOS） 安全漏洞

Linux Open Network Operating System ONOS is an open source SDN network operating system from the Linux Foundation in the United States. A security vulnerability exists in the Linux Open Network Operating System ONOS version v2.7.0, which stems from specially crafted LLDP packets that could lead t...

Linux Open Network Operating System（ONOS） 安全漏洞

Linux Open Network Operating System ONOS is an open source SDN network operating system from the Linux Foundation in the United States. A security vulnerability exists in the Linux Open Network Operating System ONOS version v2.7.0, which stems from the fact that an attacker can trigger unexpected...

The vulnerability of the ONVIF application programming interface implementation in D-Link’s DCS-8300LHV2 series of Wi-Fi cameras allows a intruder to execute arbitrary code.

The vulnerability of the ONVIF application programming interface for D-Link’s DCS-8300LHV2 Wi-Fi cameras exists due to the lack of measures taken to neutralize certain components. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2024-1094 · D Link · D-Link Dcs-8300Lhv2

Name of the Vulnerable Software and Affected Versions: D-Link DCS-8300LHV2 Description: The issue is related to the configuration of the ONVIF API in the D-Link DCS-8300LHV2 Wi-Fi camera, which is associated with weaknesses in the authentication procedure. This allows a remote attacker to bypass...

The vulnerability of the Siveillance Video Open Network Bridge software for IP video surveillance systems allows a intruder to decode all the credentials stored on the ONVIF server.

The vulnerability of the Siveillance Video Open Network Bridge software management system for IP-camera surveillance is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to decrypt all the credentials stored on...

ONOS vulnerable to Cross-site Scripting

A cross-site scripting XSS vulnerability in Open Network Operating System ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the authorizationURL parameter of the API documentation dashboard under securityDefinitions...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which stems from the fact that ONOS will modify...

PT-2023-12335 · Onos · Onos

Name of the Vulnerable Software and Affected Versions: ONOS version 2.5.1 Description: An issue was discovered in the IntentManager of ONOS. The install-requested intent, which causes an exception, remains in the pendingMap in memory forever. Deletion of this intent is not possible, neither by a...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Code injection

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android version 13, which stems from a logic error in the Settings code that can bypass the DISALLOWCONFIGWIFI restriction to connect to an open network, which can be exploited by a...

PT-2022-14470 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is caused by a logic error in the code, allowing a possible way to connect to an open network bypassing the DISALLOW CONFIG WIFI restriction in Settings. This could lead to local escalation o...

DEBIAN-CVE-2021-37964

Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation attack via a crafted ONC file...

The vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of services for the NFS ONCRPC XDR driver on Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...