Dell Networking OS10 Authentication Bypass Vulnerability (CNVD-2021-99661)

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. An authentication bypass vulnerability exists in Dell Networking OS10 version with Smart Fabric services enabled by October 2021. An unauthenticated, remote attacker could exploit the vulnerability to gain...

UniFi switch Resource Consumption DoS

The vulnerability of the microprogramming software of UniFi switches is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Huawei product memory leak vulnerability

Huawei CloudEngine is a data center switch from Huawei, a Chinese company. Huawei products are vulnerable to a memory leak that could be exploited by an attacker to cause a memory exhaustion...

Huawei CloudEngine security vulnerabilities

Huawei CloudEngine is a data center switch from Huawei, a Chinese company. Huawei products are vulnerable to a memory leak that could be exploited by an attacker to cause a memory exhaustion...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

Design/Logic Flaw

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

CVE-2021-44527 affects UniFi Switch firmware versions 5.43.35 and earlier, enabling a network-armed attacker who already has access to trigger a Denial of Service on the affected switch. The issue is resolved in UniFi Switch firmware 5.76.6 and later. The available documents describe the vulnerab...

Cisco Small Business 220 Series Smart Switch Service Data Protection

The vulnerability of the microprogrammed software of Cisco Small Business 220 Series Smart Switches lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain access to login credentials or reconfigure passwords in the user account...

CVE-2021-44527: Uncontrolled Resource Consumption

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

UniFi Switch Resource Management Error Vulnerability

The Ubiquiti UniFi Switch is a switch from Ubiquiti USA. The UniFi Switch suffers from a resource management error vulnerability that originates from a malicious actor who has gained network access to perform a denial of service DoS attack against the affected switch...

PT-2021-5212

Name of the Vulnerable Software and Affected Versions UniFi Switch versions 5.43.35 and earlier Description A vulnerability found in UniFi Switch firmware allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch. The issu...

Vulnerabilities remedied in Dell PowerEdge VRTX and X-Series firmware

Dell has fixed vulnerabilities in VRTX switch module firmware. By exploiting these vulnerabilities, an unauthenticated malicious person remotely retrieve another user's login credentials retrieve another user's login credentials and thereby gain elevated privileges. It is also it is possible to...

In libexpat before 2.2.8 crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

...

Firefly-III Cross-Site Request Forgery Vulnerability

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers via /transactions/link/switch/id...

PT-2021-17907 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.14 Description: The issue arises when grant table v2 status pages are de-allocated as a guest switches back from v2 to v1, potentially allowing a guest to retain access to a page that was freed and perhaps re-used for...

GSD-2021-1002276 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

Dell Networking OS10 Information Disclosure Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL, Inc. Dell Networking OS10 is vulnerable to information disclosure, which can be exploited by a low-privilege authenticated attacker to gain access to SNMP authentication failure messages...