Lucene search
+L

2834 matches found

GithubExploit
GithubExploit
added 2024/02/03 6:09 a.m.368 views

Exploit for PHP External Variable Modification in Juniper Junos

CVE-2023-36845 Description CVE-2023-36845 represen...

9.8CVSS7.9AI score0.94265EPSS
SaveExploits24
Exploit DB
Exploit DB
added 2024/02/02 12:00 a.m.547 views

Juniper-SRX-Firewalls&EX-switches - (PreAuth-RCE) (PoC)

Exploit Title: juniper-SRX-Firewalls&EX-switches PreAuth-RCE PoC Description: This code serves as both a vulnerability detector and a proof of concept for CVE-2023-36845. It executes the phpinfo function on the login page of the target device, allowing to inspect the PHP configuration. also this...

9.8CVSS7.5AI score0.94265EPSS
SaveExploits24
OSV
OSV
added 2024/01/26 6:15 p.m.10 views

CVE-2024-20263

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

7.2CVSS5.8AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
added 2024/01/26 6:15 p.m.74 views

CVE-2024-20263

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

7.2CVSS6.3AI score0.0045EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/26 5:27 p.m.36 views

CVE-2024-20263

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

5.8CVSS7.2AI score0.0045EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/26 5:27 p.m.7 views

CVE-2024-20263

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

5.8CVSS7.4AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/26 5:27 p.m.79 views

CVE-2024-20263

CVE-2024-20263 (Cisco ACL Bypass) : Affects Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches. The issue is an ACL handling flaw in stacked switch configurations that can cause ACLs to be applied incorrectly on backup units during full stack reloads or power cycles...

7.2CVSS7AI score0.0045EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/01/26 12:00 a.m.32 views

Cisco Small Business Series Switches Stacked Reload ACL Bypass (cisco-sa-sb-bus-acl-bypass-5zn9hNJk)

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

7.2CVSS7.1AI score0.0045EPSS
SaveExploits0References4
Cisco
Cisco
added 2024/01/24 4:00 p.m.34 views

Cisco Small Business Series Switches Stacked Reload ACL Bypass Vulnerability

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

5.8CVSS6.3AI score0.0045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.9 views

PT-2024-1298 · Cisco · Cisco Business 350 Series Managed Switches +1

Name of the Vulnerable Software and Affected Versions: Cisco Business 250 Series Smart Switches affected versions not specified Cisco Business 350 Series Managed Switches affected versions not specified Description: A vulnerability with the access control list ACL management within a stacked swit...

7.2CVSS6.8AI score0.0045EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/01/22 12:00 a.m.16 views

The vulnerability of the TFTP Server component of the Korenix microprogramming software for switches allows a hacker to circumvent existing security restrictions.

The vulnerability of the TFTP Server component of the Korenix microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

9.4CVSS7.8AI score0.01414EPSS
SaveExploits3References5Affected Software40
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:00 a.m.13 views

The vulnerability of the microprogrammed software of Zyxel GS1900 series switches, related to insecure privilege management, allows attackers to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability of the microprogrammed software of Zyxel GS1900 series switches is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level via SSH...

6.7CVSS7.4AI score0.0017EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/12/19 12:00 a.m.12 views

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches lies in the insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches lies in insufficient verification of the arguments passed in the commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7.2AI score0.00644EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2023/12/19 12:00 a.m.11 views

The vulnerability of the SCALANCE M-800/S615 family of industrial switches lies in the insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of the SCALANCE M-800/S615 family of industrial switches lies in insufficient verification of the arguments passed in the commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7AI score0.00623EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:00 a.m.14 views

The vulnerability of Siemens SCALANCE industrial switches’ SSH server allows a hacker to execute a “man-in-the-middle” attack.

The vulnerability of Siemens SCALANCE industrial switches’ SSH server is related to insufficient encryption strength. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

9.7CVSS7.4AI score0.00256EPSS
SaveExploits0References2Affected Software12
NVD
NVD
added 2023/12/05 6:15 a.m.48 views

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

7.5CVSS0.007EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/05 6:15 a.m.10 views

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

7.5CVSS5.8AI score0.007EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/05 6:15 a.m.18 views

Design/Logic Flaw

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

5CVSS7.1AI score0.007EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/05 6:04 a.m.41 views

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

7.5CVSS7.6AI score0.007EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/12/05 6:04 a.m.9 views

CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption Denial of Service vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network...

7.5CVSS7.5AI score0.007EPSS
SaveExploits0References1
Rows per page
Query Builder