5590 matches found
Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Resource Management Error Vulnerability
Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches are Ethernet switches manufactured by Moxa. The Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches are vulnerable to a resource management error that can be exploited by an attacker to cause the target device to stop...
Netgear Switch Discovery Protocol (NSDP) Detection
Detection of devices supporting the Netgear Switch Discovery Protocol NSDP. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Huawei OceanStor SNS3096 Information Disclosure Vulnerability
Huawei OceanStor SNS3096 is a fiber optic switch for data centers from Huawei, China. An information disclosure vulnerability exists in Huawei OceanStor SNS3096 V100R002C01 version. An attacker can exploit this vulnerability by performing an operation to disclose some information...
CVE-2019-18267
An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...
Cross site scripting
An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...
CVE-2019-18267
An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...
CVE-2019-18267
The CVE-2019-18267 vulnerability affects GE S2020/S2020G Fast Switch 61850, specifically versions 07A03 and prior. It is a cross-site scripting flaw arising from improper input handling in the device’s web page generation, enabling both reflected and stored XSS that can lead to session hijacking,...
14 Ways to Evade Botnet Malware Attacks On Your Computers
Cybercriminals are busy innovators, adapting their weapons and attack strategies, and ruthlessly roaming the web in search of their next big score. Every manner of sensitive information, such as confidential employee records, customers' financial data, protected medical documents, and government...
GE S2020/S2020G Fast Switch 61850 Cross-Site Scripting Vulnerability
The GE S2020/S2020G Fast Switch 61850 is a managed Ethernet switch. A cross-site scripting vulnerability exists in the GE S2020/S2020G Fast Switch 61850, which can be exploited by an attacker to inject arbitrary code...
Cisco IOS XE Software Switch Integrated Security Features IPv6 DoS (cisco-sa-20180328-sisf)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Switch Integrated Security Features due to incorrect handling of crafted IPv6 packets. An unauthenticated, remote attacker can exploit this, by sending crafted IPv6 packets to...
GE S2020/S2020G Fast Switch 61850
1. EXECUTIVE SUMMARY CVSS v3 4.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: GE S2020/S2020G Fast Switch 61850 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to inject arbitrary code...
Unspecified Vulnerability in Lava Flair Z1
Lava Flair Z1 is a smartphone from Lava India. Lava Flair Z1 has an unspecified vulnerability. An attacker can exploit the vulnerability to unauthorized switching of Wi-Fi...
kernel: Exploitable memory corruption due to UFO to non-UFO path switch
An exploitable memory corruption flaw was found in the Linux kernel. The append path can be erroneously switched from UFO to non-UFO in ipufoappenddata when building an UFO packet with MSGMORE option. If unprivileged user namespaces are available, this flaw can be exploited to gain root privilege...
Multiple Weidmueller Products Insecure Credential Storage Vulnerabilities
Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An insecure credential storage vulnerability exists in multiple Weidmueller products, which stems from a program storing passwords in plaintext form and can be exploited by an attacker to read the...
Multiple Weidmueller Products Information Disclosure Vulnerability (CNVD-2020-01004)
Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An information disclosure vulnerability exists in multiple Weidmueller products that originates from a program passing sensitive credential data in clear text. An attacker could exploit this...
Multiple Weidmueller Products Resource Management Error Vulnerability
Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. A resource management error vulnerability exists in multiple Weidmueller products, which can be exploited by an attacker via a specially crafted packet to cause the device to crash...
Multiple Huawei products encryption issues vulnerabilities
The Huawei S12700, among others, is an enterprise switch product from Huawei, a Chinese company. An encryption vulnerability exists in several Huawei products. The vulnerability stems from a weak encryption algorithm used by the product by default, which can be exploited by an attacker to disclos...
CentOS Update for bpftool CESA-2019:3979 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
User enumeration leak using switch user functionality in Symfony
An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This is related to symfony/security...
Allied Telesis AT-GS950/8 Directory Traversal Vulnerability
The Allied Telesis AT-GS950/8 is a switch from Allied Telesis Japan. A path traversal vulnerability exists in the web interface in the Allied Telesis AT-GS950/8. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or...