Lucene search
+L

1874 matches found

NVD
NVD
added 2022/10/10 9:15 p.m.20 views

CVE-2022-34425

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

7.5CVSS0.00789EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/10 9:15 p.m.21 views

Design/Logic Flaw

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

5CVSS7.5AI score0.00789EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/10/10 8:55 p.m.63 views

CVE-2022-34425

Dell Enterprise SONiC OS versions 4.0.0–4.0.1 are affected by a cryptographic-key vulnerability in SSH caused by a hardcoded key, enabling an unauthenticated remote attacker to potentially access communications. The connected PT-2022-5021 entry provides concrete details and recommends immediate m...

7.5CVSS7.4AI score0.00789EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/10 8:55 p.m.36 views

CVE-2022-34425

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

7.5CVSS7.7AI score0.00789EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/10/10 12:00 a.m.11 views

Dell Enterprise SONiC OS 信任管理问题漏洞

Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open source network operating system from Dell, Inc. A remote attacker could exploit this vulnerability to cause unauthorized access to communications...

7.5CVSS6.7AI score0.00789EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/09/15 12:00 a.m.8 views

CVE-2022-34425

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

7.5CVSS6AI score0.00789EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/08 10:15 a.m.6 views

CVE-2021-20043

A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

8.8CVSS8.5AI score0.23259EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/08 10:15 a.m.7 views

CVE-2021-20045

A buffer overflow vulnerability in SMA100 sonicfiles RACCOPYTO RacNumber 36 method allows a remote unauthenticated attacker to potentially execute code as the 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...

9.8CVSS6.2AI score0.25208EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/14 12:00 a.m.36 views

Dell Enterprise SONiC OS Information Disclosure Vulnerability

Dell Enterprise Sonic Os Dell Enterprise Sonic OS is an open source network operating system from Dell Dell. An information disclosure vulnerability exists in Dell Enterprise SONiC OS 3.3.0 and earlier versions, which can be exploited by an authenticated, malicious user to gain access to the syst...

7.1CVSS6.3AI score0.00644EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/01 9:15 p.m.6 views

CVE-2021-36309

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

6.5CVSS6.6AI score0.00644EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/01 9:15 p.m.19 views

CVE-2021-36309

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

7.1CVSS0.00644EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/01 9:15 p.m.24 views

Information disclosure

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

4CVSS6AI score0.00644EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/01 8:20 p.m.54 views

CVE-2021-36309

Summary of CVE-2021-36309 : Dell Enterprise SONiC OS (Dell Enterprise SONiC OS) versions 3.3.0 and earlier are affected by an information-disclosure vulnerability. An authenticated attacker with system access can read sensitive information by abusing stored TACACS/RADIUS credentials. The impact i...

7.1CVSS6AI score0.00644EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/01 8:20 p.m.28 views

CVE-2021-36309

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

7.1CVSS6.7AI score0.00644EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/01 12:00 a.m.10 views

Dell Enterprise Sonic Os 信息泄露漏洞

Dell Enterprise Sonic Os Dell Enterprise Sonic OS is an open source network operating system from Dell Dell. An information disclosure vulnerability exists in Dell Enterprise SONiC OS 3.3.0 and earlier versions, which can be exploited by an authenticated, malicious user to gain access to the syst...

7.1CVSS5.7AI score0.00644EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/10/01 12:00 a.m.10 views

PT-2021-21211 · Dell · Dell Enterprise Sonic Os

Name of the Vulnerable Software and Affected Versions: Dell Enterprise SONiC OS versions 3.3.0 and earlier Description: The issue allows an authenticated malicious user with access to the system to read sensitive information using the TACACSRadius credentials stored, potentially using it in furth...

7.1CVSS6.2AI score0.00644EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2021/09/17 12:00 a.m.5 views

CVE-2021-36309

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks...

7.1CVSS6.6AI score0.00644EPSS
SaveExploits0References2
Qualys Blog
Qualys Blog
added 2021/08/10 2:40 p.m.109 views

QID Spotlight: Discover CBL-Mariner Vulnerabilities using Qualys VMDR

The Qualys vulnerability signatures team has released a new series of signatures detections for CBL-Mariner Common Base Linux, allowing security teams to identify CBL-Mariner hosts and detect their vulnerabilities. CBL-Mariner Common Base Linux is developed by Microsoft and is a Linux distributio...

1.2AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/07/07 3:27 a.m.69 views

Pro-Trump Gettr Social Platform Hacked On Day 1

Gettr, a social media platform set up by allies of former President Donald Trump, was still wet and squirming when it got hacked – twice. The first slap on the rump for the politically conservative platform came in the form of Sonic the Hedgehog-themed porn that flooded it over the Fourth of July...

7AI score
SaveExploits0References15
Openbugbounty
Openbugbounty
added 2020/05/31 8:24 a.m.13 views

sonic.sega.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1178899 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

6.1AI score
SaveExploits0
Rows per page
Query Builder