86 matches found
CVE-2026-2380
On affected platforms running Arista EOS with OpenConfig-related services i.e., gNMI, gNSI, RESTCONF and NETCONF, sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming vi...
CVE-2026-2380
CVE-2026-2380 affects Arista EOS when OpenConfig-related services (gNMI, gNSI, RESTCONF, or NETCONF) are enabled. The OpenConfig/Octa agent may unintentionally log sensitive requests and responses—such as CLI commands containing passwords or OpenConfig YANG secret-key leafs—to local agent logs or...
CVE-2026-2380: Plaintext Storage of a Password
On affected platforms running Arista EOS with OpenConfig-related services i.e., gNMI, gNSI, RESTCONF and NETCONF, sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming vi...
PT-2026-93363
Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description On platforms running Arista EOS with OpenConfig-related services, including gNMI, gNSI, RESTCONF, and NETCONF, sensitive requests and responses may be unintentionally logged. This...
EUVD-2020-24678
Malware in sbrugna...
EUVD-2017-1520
Malware in sbrugna...
EUVD-2018-11333
Malware in sbrugna...
EUVD-2021-15183
Malware in sbrugna...
EUVD-2021-22927
Malware in sbrugna...
EUVD-2021-22926
Malware in sbrugna...
EUVD-2021-7086
Malicious code in bioql PyPI...
EUVD-2025-13908
Malicious code in bioql PyPI...
PT-2025-34888 · Cisco · Cisco Nexus 3000 Series Switches +1
Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 Series Switches Cisco Nexus 9000 Series Switches Description: A vulnerability in the Protocol Independent Multicast Version 6 PIM6 feature could allow an authenticated, low-privileged, remote attacker to trigger a crash of th...
CVE-2025-20214
A vulnerability in the Network Configuration Access Control Module NACM of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists because a subtle change in inner API call behavior caus...
CVE-2025-20214
A vulnerability in the Network Configuration Access Control Module NACM of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists because a subtle change in inner API call behavior caus...
CVE-2025-20214
A vulnerability in the Network Configuration Access Control Module NACM of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists because a subtle change in inner API call behavior caus...
CVE-2025-20214: Authorization Bypass Through User-Controlled Key
A vulnerability in the Network Configuration Access Control Module NACM of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists because a subtle change in inner API call behavior caus...
Cisco IOS XE Software NETCONF/RESTCONF IPv4 Access Control List Bypass (cisco-sa-dmi-acl-bypass-Xv8FO8Vz)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the data model interface DMI services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv...
CVE-2024-20316
A vulnerability in the data model interface DMI services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list ACL. This vulnerability is due to improper handling of error conditions wh...
CVE-2024-20316
A vulnerability in the data model interface DMI services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list ACL. This vulnerability is due to improper handling of error conditions wh...