547 matches found
CVE-2020-12144 The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal...
PT-2020-13063 · Silver Peak · Silver Peak Edgeconnect
Name of the Vulnerable Software and Affected Versions: Silver Peak EdgeConnect affected versions not specified Description: The issue arises from the lack of validation of the certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices. This oversight allows an attacker to...
SQL Injection Vulnerability in Shanghai Silverfox Information Technology Co.
Shanghai Silver Fox Information Technology Co., Ltd. is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. station building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...
silver-peak.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1133598 Security Researcher NUMAN Helped patch 33 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting silver-peak.com website and its users. Following coordinat...
silver-peak.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1125088 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Silver - Mass Scan IPs For Vulnerable Services
masscan is fast, nmap can fingerprint software and vulners is a huge vulnerability database. Silver is a front-end that allows complete utilization of these programs by parsing data, spawning parallel processes, caching vulnerability data for faster scanning over time and much more. Note: Silver...
silver-peak.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8547 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting silver-peak.com website and its users. Following coordinat...
Silver Peak Systems EdgeConnect SD-WAN Permission License and Access Control Issues Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A security vulnerability exists in Silver Peak Systems...
Silver Peak Systems EdgeConnect SD-WAN Cross-Site Scripting Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A cross-site scripting vulnerability exists in Silver Peak...
Silver Peak Systems EdgeConnect SD-WAN Path Traversal Vulnerability
Silver Peak Systems EdgeConnect SD-WAN is a suite of software-defined, wide-area networking platforms from Silver Peak Systems, USA. The platform provides path conditioning, application classification, routing and virtual WAN overlay. A path traversal vulnerability exists in Silver Peak Systems...
CVE-2019-16104
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...
CVE-2019-16105
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...
CVE-2019-16103
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...
CVE-2019-16105
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...
CVE-2019-16103
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation by administrators from the menu to a root Bash OS shell via the spsshell feature...
CVE-2019-16104
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...
CVE-2019-16102
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...
CVE-2019-16099
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file...
CVE-2019-16101
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...