Lucene search
K

88 matches found

Positive Technologies
Positive Technologies
added 2023/12/07 12:0 a.m.2 views

PT-2023-32555 · Bcb · Bcb

Name of the Vulnerable Software and Affected Versions: BCB affected versions not specified Description: The issue is related to an oversight in BCB handling of reboot reason, allowing for persistent code execution. Recommendations: At the moment, there is no information about a newer version that...

9.8CVSS9.4AI score0.0009EPSS
Exploits0References6
OSV
OSV
added 2023/11/14 11:15 p.m.1 views

CVE-2023-45626

An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary code execution across boot cycles...

7.2CVSS6.2AI score
Exploits0References1
Prion
Prion
added 2023/11/02 2:15 p.m.14 views

Cross site scripting

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...

4.9CVSS5.4AI score0.00159EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/02 1:1 p.m.14 views

CVE-2023-26456

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...

5.4CVSS6.4AI score0.00159EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.5 views

PT-2023-20649 · Ox Guard · Ox Guard

Name of the Vulnerable Software and Affected Versions: OX Guard affected versions not specified Description: The issue allows users to set an arbitrary "product name" for OX Guard, which was not sufficiently sanitized before processing it at the user interface. This enabled indirect cross-site...

5.4CVSS5.3AI score0.00159EPSS
Exploits0References5
Prion
Prion
added 2023/03/23 5:15 p.m.15 views

Design/Logic Flaw

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

4.6CVSS6.7AI score0.00221EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/23 12:0 a.m.10 views

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

6.1CVSS7.3AI score0.00221EPSS
Exploits0References1
Cisco
Cisco
added 2023/03/22 4:0 p.m.76 views

Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

6.1CVSS6.5AI score0.00221EPSS
Exploits0References1
OSV
OSV
added 2022/11/15 9:15 p.m.1 views

CVE-2022-20826

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...

6.8CVSS5.9AI score0.00402EPSS
Exploits0References1
Prion
Prion
added 2022/11/15 9:15 p.m.14 views

Design/Logic Flaw

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...

4.6CVSS6.7AI score0.00402EPSS
Exploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2022/11/09 12:0 a.m.2 views

PT-2022-5688 · Cisco · Cisco Secure Firewalls 3100 Series +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewalls 3100 Series versions affected versions not specified Description: A vulnerability in the secure boot implementation could allow an unauthenticated attacker with physical access to the device to bypass the secure boot...

6.8CVSS6.4AI score0.00402EPSS
Exploits0References7
NVD
NVD
added 2022/04/15 3:15 p.m.18 views

CVE-2022-20661

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

4.9CVSS0.00329EPSS
Exploits0References1
OSV
OSV
added 2022/04/15 3:15 p.m.1 views

CVE-2022-20661

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

4.6CVSS5.9AI score0.00329EPSS
Exploits0References1
Prion
Prion
added 2022/04/15 3:15 p.m.14 views

Design/Logic Flaw

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

4.9CVSS5.2AI score0.00329EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/15 2:20 p.m.17 views

CVE-2022-20731 Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

4.6CVSS7AI score0.00089EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/04/15 2:20 p.m.13 views

CVE-2022-20731 Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

4.6CVSS7.3AI score0.00089EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/04/15 2:16 p.m.7 views

CVE-2022-20661 Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

4.6CVSS7.3AI score0.00329EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/15 2:16 p.m.17 views

CVE-2022-20661 Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

4.6CVSS6AI score0.00329EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/04/15 12:0 a.m.1 views

Cisco Catalyst Digital Building Series Switches 安全漏洞

Cisco Catalyst Digital Building Series Switches are a series of digital building switches from Cisco USA. A security vulnerability exists in the Cisco Catalyst Digital Building Series Switches where an authenticated local attacker with level 15 privileges or an unauthenticated attacker with...

7.2CVSS6.2AI score0.00089EPSS
Exploits0References3
Cisco
Cisco
added 2022/04/13 4:0 p.m.41 views

Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service DoS condition. For...

6.8CVSS0.9AI score0.00329EPSS
Exploits0References1
Rows per page
Query Builder