Lucene search
+L

6984 matches found

osv_rustsec
osv_rustsec
•added 2020/01/20 12:00 p.m.•28 views

RUSTSEC-2020-0003 rust_sodium is unmaintained; switch to a modern alternative

The rustsodium crate is no longer maintained by its current owner, who advise in the repository readme that they are looking for someone else to take ownership of it. We recommend you switch to an alternative crate such as: - sodiumoxide...

7AI score
SaveExploits0References3
RustSec
RustSec
•added 2020/01/20 12:00 p.m.•32 views

rust_sodium is unmaintained; switch to a modern alternative

The rustsodium crate is no longer maintained by its current owner, who advise in the repository readme that they are looking for someone else to take ownership of it. We recommend you switch to an alternative crate such as: - sodiumoxide...

3.3AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/15 12:00 a.m.•18 views

Open Network Flow Web Resource Arbitrary Modification

The vulnerability of the createFlow and createFlows functions FlowWebResource.java of the RESTful operating system service of Open Network Operating System is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to arbitrarily modify the settings of the switch...

4.9CVSS5.7AI score0.01059EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/15 12:00 a.m.•20 views

Open Network Flow Web Resource Arbitrary Modification

The vulnerability of the createFlow and createFlows functions FlowWebResource.java of the RESTful operating system service of Open Network Operating System exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to arbitrarily modify the settings...

4.9CVSS5.6AI score0.01059EPSS
SaveExploits1References6Affected Software1
FreeBSD
FreeBSD
•added 2020/01/14 12:00 a.m.•78 views

drm graphics drivers -- potential information disclusure via local access

Intel reports: .A potential security vulnerability in IntelR Processor Graphics may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Description: Insufficient control flow in certain data structures for some IntelR Processors with IntelR...

5.5CVSS2.5AI score0.01459EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/01/10 12:00 a.m.•15 views

Huawei CloudEngine 12800, S5700 and S6700 weak algorithm vulnerability

Huawei CloudEngine 12800 and others are products of Huawei, China.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei S5700 is an enterprise switch.Huawei S6700 is an enterprise switch.Huawei CloudEngine 12800 is a 12800 series data center switch.Huawei CloudEngine 12800 is a 128...

5.3CVSS6.7AI score0.00452EPSS
SaveExploits0References1
NVD
NVD
•added 2020/01/09 2:15 a.m.•33 views

CVE-2020-6628

Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...

8.8CVSS8.8AI score0.01541EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/01/09 12:00 a.m.•20 views

libming heap buffer overflow vulnerability (CNVD-2020-03261)

libming is a Flash SWF output library written in C. It can be used as a library to export Flash SWF files to other languages. A buffer overflow vulnerability exists in the 'decompileSWITCH' function of the decompile.c file in libming version 0.4.8. The vulnerability stems from a networked system ...

8.8CVSS7.4AI score0.01541EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/01/09 12:00 a.m.•7 views

PT-2020-19193

Name of the Vulnerable Software and Affected Versions Ming aka libming version 0.4.8 Description The issue is a heap-based buffer over-read in the function decompile SWITCH located in decompile.c. Recommendations For Ming aka libming version 0.4.8, consider avoiding the use of the decompile SWITC...

8.8CVSS0.01541EPSS
SaveExploits1References6
Zero Day Initiative
Zero Day Initiative
•added 2020/01/03 12:00 a.m.•28 views

Cisco Data Center Network Manager getDiscoveredDeviceCount switchIdList SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Data Center Network Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS4.5AI score0.46935EPSS
SaveExploits10References1
CNVD
CNVD
•added 2020/01/01 12:00 a.m.•20 views

D-Link DGS-1510 Command Injection Vulnerability

The D-Link DGS-1510 is a DGS-1510 series switch from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DGS-1510 using firmware versions 1.20.011, 1.30.007, and 1.31.B003 and earlier. A remote attacker can exploit the vulnerability to inject malicious scripts and execute...

6.1CVSS7.2AI score0.0146EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/12/31 12:00 a.m.•8 views

PT-2019-15892

Name of the Vulnerable Software and Affected Versions Big Switch Big Monitoring Fabric versions 6.2 through 6.2.4 Big Switch Big Monitoring Fabric versions 6.3 through 6.3.9 Big Switch Big Monitoring Fabric versions 7.0 through 7.0.3 Big Switch Big Monitoring Fabric versions 7.1 through 7.1.3 Big...

6.1CVSS0.01027EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2019/12/31 12:00 a.m.•9 views

PT-2019-15891

Name of the Vulnerable Software and Affected Versions Big Switch Big Monitoring Fabric versions 6.2 through 6.2.4 Big Switch Big Monitoring Fabric versions 6.3 through 6.3.9 Big Switch Big Monitoring Fabric versions 7.0 through 7.0.3 Big Switch Big Monitoring Fabric versions 7.1 through 7.1.3 Big...

8.8CVSS0.01733EPSS
SaveExploits1References6
CNVD
CNVD
•added 2019/12/23 12:00 a.m.•24 views

Denial of Service Vulnerability in Multiple Xiaomi Products (CNVD-2020-03067)

Xiaomi DGNWG03LM and others are products of Xiaomi, a Chinese company.Xiaomi DGNWG03LM is a smart home gateway device.ZNCZ03LM is a smart switch device.MCCGQ01LM is a smart remote control. A security vulnerability exists in multiple Xiaomi products. An attacker can exploit the vulnerability to...

7.5CVSS6.9AI score0.01309EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/12/23 12:00 a.m.•19 views

Denial of Service Vulnerability in Multiple Xiaomi Products

Xiaomi DGNWG03LM and others are products of Xiaomi, a Chinese company.Xiaomi DGNWG03LM is a smart home gateway device.ZNCZ03LM is a smart switch device.MCCGQ01LM is a smart remote control. A security vulnerability exists in multiple Xiaomi products. An attacker can exploit the vulnerability to...

7.5CVSS6.9AI score0.01151EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2019/12/20 4:15 p.m.•30 views

CVE-2019-17440

Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...

9.8CVSS5.8AI score0.01679EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/12/20 12:00 a.m.•18 views

Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Resource Management Error Vulnerability

Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches are Ethernet switches manufactured by Moxa. The Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches are vulnerable to a resource management error that can be exploited by an attacker to cause the target device to stop...

7.8CVSS6.9AI score0.01333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/20 12:00 a.m.•7 views

CVE-2019-17440: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with second-generation Switch Management Card SMC may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and...

10CVSS8.1AI score0.01679EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2019/12/19 12:00 a.m.•201 views

Netgear Switch Discovery Protocol (NSDP) Detection

Detection of devices supporting the Netgear Switch Discovery Protocol NSDP. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

0.4AI score
SaveExploits0References1
CNVD
CNVD
•added 2019/12/19 12:00 a.m.•17 views

Huawei OceanStor SNS3096 Information Disclosure Vulnerability

Huawei OceanStor SNS3096 is a fiber optic switch for data centers from Huawei, China. An information disclosure vulnerability exists in Huawei OceanStor SNS3096 V100R002C01 version. An attacker can exploit this vulnerability by performing an operation to disclose some information...

5.5CVSS6.1AI score0.00222EPSS
SaveExploits0References1
Rows per page
Query Builder