Lucene search
+L

6615 matches found

Tenable Nessus
Tenable Nessus
added 2025/02/05 12:00 a.m.11 views

F5 Networks BIG-IP : BIG-IP SNMP vulnerability (K000140933)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso / Hotfix-BIGIP-16.1.5.2.0.7.5-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000140933 advisory. When SNMP v1 or v2c are disabled on th...

8.7CVSS6AI score0.00452EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/05 12:00 a.m.11 views

PT-2025-5721 · Cisco · Cisco Ios Xe +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability i...

7.7CVSS6.1AI score0.00764EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/02/05 12:00 a.m.9 views

PT-2025-5718 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This is due to...

7.7CVSS6.1AI score0.00764EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/02/05 12:00 a.m.3 views

PT-2025-5714 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software versions prior to the fixed version Cisco IOS XE Software versions prior to the fixed version Description: A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a DoS condition on an...

7.7CVSS6.2AI score0.00783EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2025/02/04 11:10 p.m.17 views

CVE-2024-0005

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration...

9.1CVSS7.7AI score0.00631EPSS
SaveExploits1References1
NVD
NVD
added 2025/01/27 5:15 p.m.30 views

CVE-2025-22604

Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ssnetsnmpdiskio or ssnetsnmpdiskbytes, a part of each OID will be used as a key in an array that is...

9.1CVSS0.05381EPSS
SaveExploits1References3
OSV
OSV
added 2025/01/27 5:15 p.m.10 views

UBUNTU-CVE-2025-22604

Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ssnetsnmpdiskio or ssnetsnmpdiskbytes, a part of each OID will be used as a key in an array that is...

9.1CVSS7.4AI score0.05381EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/01/27 5:06 p.m.14 views

CVE-2025-22604 Cacti has Authenticated RCE via multi-line SNMP responses

Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ssnetsnmpdiskio or ssnetsnmpdiskbytes, a part of each OID will be used as a key in an array that is...

9.1CVSS9.1AI score0.05381EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2025/01/27 5:06 p.m.30 views

CVE-2025-22604

Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ssnetsnmpdiskio or ssnetsnmpdiskbytes, a part of each OID will be used as a key in an array that is...

9.1CVSS6.9AI score0.05381EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/01/27 5:06 p.m.31 views

CVE-2025-22604 Cacti has Authenticated RCE via multi-line SNMP responses

Cacti is an open source performance and fault management framework. Due to a flaw in multi-line SNMP result parser, authenticated users can inject malformed OIDs in the response. When processed by ssnetsnmpdiskio or ssnetsnmpdiskbytes, a part of each OID will be used as a key in an array that is...

9.1CVSS0.05381EPSS
SaveExploits1References2
CVE
CVE
added 2025/01/27 5:06 p.m.193 views

CVE-2025-22604

CVE-2025-22604 affects Cacti, where a flaw in the multi-line SNMP result parser allows authenticated users to inject malformed OIDs; processing by ss_net_snmp_disk_io() or ss_net_snmp_disk_bytes() uses part of an OID as a key in an array that feeds a system command, causing a command execution vu...

9.1CVSS7AI score0.05381EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/01/27 12:00 a.m.15 views

Cacti 操作系统命令注入漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from an operating system command injection vulnerability that...

9.1CVSS9.5AI score0.05381EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2025/01/27 12:00 a.m.25 views

Unraid OS Detection (SNMP)

SNMP based detection of Unraid OS. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.153875";...

5.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/26 12:00 a.m.12 views

PT-2025-1299

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.29 Cacti versions prior to 1.2.24+ds1-1+deb12u5 Cacti versions prior to 1.2.16+ds1-2+deb11u5 Description Cacti, a web interface for graphing of monitoring systems, contains a flaw in its multi-line SNMP result parse...

9.1CVSS7.4AI score0.05381EPSS
SaveExploits1References74
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.42 views

CVE-2022-44793 affecting package net-snmp 5.9-4

CVE-2022-44793 affecting package net-snmp 5.9-4. No patch is available currently...

6.5CVSS6.9AI score0.5346EPSS
SaveExploits1
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.28 views

CVE-2022-44792 affecting package net-snmp 5.9-4

CVE-2022-44792 affecting package net-snmp 5.9-4. No patch is available currently...

6.5CVSS6.9AI score0.52054EPSS
SaveExploits1
NVD
NVD
added 2025/01/10 9:15 p.m.15 views

CVE-2024-7095

On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated causing SNMP requests to time out...

4.3CVSS0.00481EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/10 8:19 p.m.9 views

CVE-2024-7095 On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being term

On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated causing SNMP requests to time out...

4.3CVSS4.6AI score0.00481EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/10 8:19 p.m.33 views

CVE-2024-7095 On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being term

On affected platforms running Arista EOS with SNMP configured, if “snmp-server transmit max-size” is configured, under some circumstances a specially crafted packet can cause the snmpd process to leak memory. This may result in the snmpd process being terminated causing SNMP requests to time out...

4.3CVSS0.00481EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/10 8:19 p.m.93 views

CVE-2024-7095

CVE-2024-7095 affects Arista EOS when SNMP is enabled and the SNMP transmit max-size is configured. A crafted packet can cause the snmpd process to leak memory, potentially terminating snmpd and causing SNMP requests to time out, with memory pressure that could affect other processes. The issue i...

4.3CVSS4.6AI score0.00481EPSS
SaveExploits0References1
Rows per page
Query Builder