Cisco Catalyst 9200 Series Switches Jumbo Frame DoS (cisco-sa-JP-DOS-g5FfGm8y)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service vulnerability due to insufficient packet size validation. An unauthenticated, remote attacker can exploit this, by sending jumbo frames or frames larger than the configured MTU size to the management...

Juniper Junos OS Multiple Vulnerabilities (JSA11175)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11175 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11153)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11153 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11119)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11119 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11140)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11140 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11118)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11118 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11135)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11135 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

Juniper Junos OS Vulnerability (JSA11144)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11144 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network Security, Inc...

CVE-2021-1392

CVE-2021-1392 : A vulnerability in the CLI command permissions of Cisco IOS and IOS XE Software could let an authenticated, local attacker retrieve the CIP password via the show cip security command and then reconfigure the device as an administrative user. Root cause: incorrect permissions on th...

Cisco IOS XE Buffer Overflow Vulnerabilities (cisco-sa-sdwan-bufovulns-B5NrSHbj)

According to its self-reported version, Cisco IOS XE Software is affected by multiple buffer overflow vulnerabilities that allow an unauthenticated, remote attacker to execute attacks against an affected device. Please see the included Cisco BIDs and Cisco Security Advisory for more information...

Cisco Data Center Network Manager SQL Injection Vulnerabilities (cisco-sa-dcnm-sql-inj-OAQOObP)

The version of Cisco Data Center Network Manager DCNM installed on the remote host is affected by multiple SQL injection vulnerabilities in certain REST API endpoints. An authenticated, remote attacker can exploit this, by suppling crafted input, in order to execute arbitrary SQL commands on an...

Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password (cisco-sa-20181003-cpcp-password)

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is prior to 12.1. It is, therefore, affected by a vulnerability in the install function that could allow an unauthenticated, remote attacker to access the administrative web interface using a...

Junos OS malformed IPv6 packet DoS (JSA11083)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11083 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. TRUSTED...

CVE-2020-27692

The Relish Verve Connect VH510 device with firmware before 1.0.1.6L0516 contains multiple CSRF vulnerabilities within its web management portal. Attackers can, for example, use this to update the TR-069 configuration server settings responsible for managing devices remotely. This makes it possibl...

Juniper Junos OS: DoS Vulnerability (JSA11068)

The version of Junos OS installed on the remote host is prior to 17.4R2-S12, 18.1R3-S11, 18.2R3-S6, 18.2X75-D65, 18.3R2-S4, 18.4R2-S5, 19.1R3-S2, 19.2R1-S5, 19.3R2-S4, 19.4R1-S3, or 20.1R1-S3. It is, therefore, affected by a vulnerability as referenced in the JSA11068 advisory. Note that Nessus h...

Cisco Identity Services Engine XSS (cisco-sa-ise-xxs-mf5cbYx5)

A cross-site scripting XSS vulnerability exists in Cisco Identity Services Engine web-based management interface due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, by convincing a user to click a specially crafted UR...

Cisco IOS Software MP BGP EVPN DoS (cisco-sa-ios-bgp-evpn-dos-LNfYJxfF)

According to its self-reported version, IOS is affected by a denial of service DoS vulnerability in the Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family. An unauthenticated, remote attacker can exploit this, by sending BGP update messages wit...

Cisco Small Business RV Series Arbitrary Code Execution (cisco-sa-code-exec-wH3BNFb)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by an arbitrary code execution vulnerability due to improper input validation. An unauthenticated remote attacker can exploit this, via maliciously crafted requests, to execute arbitrary code with...

F5 Networks BIG-IP : TMUI CSRF vulnerability (K31301245)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.2 / 13.1.3.4 / 14.1.2.6 / 15.0.1.4 / 15.1.0.4 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K31301245 advisory. A cross-site request forgery CSRF vulnerability in the Traffic Managemen...

Unspecified Vulnerability in BIOTRONIK CardioMessenger II-S

The Biotronik CardioMessenger II-S is a portable medical monitoring device from Biotronik Germany. A security vulnerability exists in Biotronik CardioMessenger II-S T-Line T4APP version 2.20 and II-S GSM T4APP version 2.20, which originates from the transmission of credentials in plaintext form...