CVE-2019-5322

CVE-2019-5322 affects Aruba Intelligent Edge Switches (models 5400, 3810, 2920, 2930, 2530 with GigT, 2530 10/100, or 2540). The vulnerability exists in firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, and 16.10.* before 16.10.0003 and allows an attacker to retrieve sensitive system...

CVE-2019-5322: Undefined Security Weakness

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

PT-2020-11114

Name of the Vulnerable Software and Affected Versions Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540 versions 16.08. through 16.08.0008 Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, ...

rulinalg is unmaintained, use nalgebra instead

The rulinalg crate is no longer maintained, use nalgebra instead...

Brocade Fabric OS Sensitive Information Disclosure Vulnerability

Brocade Fabric OS is a set of embedded operating systems used in devices such as switches and routers. Brocade Fabric OS has a security vulnerability that can be exploited by a remote attacker to submit a special request that can be used to obtain sensitive information between a switch and a serv...

CVE-2014-3809: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch PSS 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html...

PT-2020-7658

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent 1830 Photonic Service Switch PSS versions 6.0 and earlier Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via the myurl parameter ...

CVE-2020-3147

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this...

CVE-2013-2748

Belkin Wemo Switch before WeMoUS2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system...

Information disclosure

Belkin Wemo Switch before WeMoUS2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system...

CVE-2013-2748

Belkin Wemo Switch before WeMoUS2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system...

CVE-2013-2748

Summary: CVE-2013-2748 affects Belkin Wemo Switch firmware prior to WeMo_US_2.00.2176.PVT (and WW version) and allows remote attackers to upload arbitrary files onto the system via firmwareupdate handling. The vulnerability is demonstrated by publicly available PoCs/exploits showing an UpdateFirm...

CVE-2013-2748: Unrestricted Upload of File with Dangerous Type

Belkin Wemo Switch before WeMoUS2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system...

PT-2020-7420

Name of the Vulnerable Software and Affected Versions: Belkin Wemo Switch versions prior to WeMo US 2.00.2176.PVT Description: The issue allows remote attackers to upload arbitrary files onto the system. Recommendations: For versions prior to WeMo US 2.00.2176.PVT, update to WeMo US 2.00.2176.PVT...

Palo Alto Networks PAN-OS Series PA-7000 9.0 < 9.0.5-h5 Remote Code Execution Vulnerability (PAN-SA-2019-0040)

The version of Palo Alto Networks PAN-OS running on the remote host is 9.x prior to 9.0.5-h3. It is, therefore, affected by a remote code execution vulnerability. Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management...

CVE-2020-5218

Affected versions of Sylius give attackers the ability to switch channels via the channelcode GET parameter in production environments. This was meant to be enabled only when kernel.debug is set to true. However, if no syliuschannel.debug is set explicitly in the configuration, the default value...

CVE-2020-5218

Affected versions of Sylius give attackers the ability to switch channels via the channelcode GET parameter in production environments. This was meant to be enabled only when kernel.debug is set to true. However, if no syliuschannel.debug is set explicitly in the configuration, the default value...

CVE-2020-5218 Ability in Sylius to switch channels via GET parameter enabled in production environments

Affected versions of Sylius give attackers the ability to switch channels via the channelcode GET parameter in production environments. This was meant to be enabled only when kernel.debug is set to true. However, if no syliuschannel.debug is set explicitly in the configuration, the default value...

CVE-2019-17094

A Stack-based Buffer Overflow vulnerability in libbelkinapi.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Belkin WeMo Insight Switch firmware version 2.00.11396 and prior versions...

CVE-2019-17094

A Stack-based Buffer Overflow vulnerability in libbelkinapi.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Belkin WeMo Insight Switch firmware version 2.00.11396 and prior versions...