19 matches found
EUVD-2020-12545
Malware in sbrugna...
EUVD-2008-5839
Malware in sbrugna...
CVE-2022-22211 Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID
A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause Denial of Service DoS. Continuously polling the SNMP jnxCosQstatTable causes the FPC to run out of GUID space, causing a Denial of Service to...
CVE-2020-1683
On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash vmcore. Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of t...
Memory corruption
On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash vmcore. Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of t...
CVE-2020-1683 Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling
On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash vmcore. Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of t...
CVE-2020-1683: Missing Release of Memory after Effective Lifetime
On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash vmcore. Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of t...
PT-2020-5152
Name of the Vulnerable Software and Affected Versions Junos versions 17.4R3 through 19.4R1-S3 Description The issue is related to a memory leak caused by a specific SNMP OID poll, which can lead to a kernel crash over time. This may also impact other processes, such as establishing SSH connection...
PT-2020-14073
Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.4 through 4.5 Description A buffer overflow issue was found in the SNMP agent of Contiki-NG, specifically in functions that parse OIDs in SNMP requests. The snmp oid decode oid function lacks sufficient verification of th...
CVE-2019-3926: Improper Neutralization of Input During Web Page Generation
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.14.1. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root...
CVE-2019-3925: Improper Neutralization of Input During Web Page Generation
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to command injection via SNMP OID iso.3.6.1.4.1.3212.100.3.2.9.3. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root...
Net-SNMP Denial of Service Vulnerability
Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices and so on. A security vulnerability exists in the 'snmpoidcompare' function in the snmplib/snmpapi.c file in Net-SNMP versions prior to 5.8. ...
UBUNTU-CVE-2018-18066
snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...
PT-2018-3134
Name of the Vulnerable Software and Affected Versions Net-SNMP versions prior to 5.8 Description The issue is related to a NULL Pointer Exception bug in the snmp oid compare function. This bug can be exploited by an unauthenticated attacker to remotely cause the instance to crash via a crafted UD...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...
CVE-2015-6005: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via 1 an SNMP OID object, 2 an SNMP trap message, 3 the View Names field, 4 the Group Names field, 5 the Flow Monitor Credentials field, 6 the Flow...
Cross site scripting
Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...
CVE-2008-5869
Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...
CVE-2008-5869: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...