Latest vulnerabilities for vendor "arista"

8.3

First published (updated )

CVE-2024-12832

Arista NG Firewall(0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

6.6

First published (updated )

CVE-2024-12831

Arista NG Firewall(0Day) Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

8.1

First published (updated )

CVE-2024-12830

Arista NG Firewall(0Day) Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

7.2

First published (updated )

CVE-2024-12829

Arista NG FirewallZDI-24-1717: (0Day) Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

7.2

First published (updated )

ZDI-CAN-24015

Never miss a vulnerability like this again

Arista NG Firewall(0Day) Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

7.2

First published (updated )

ZDI-24-1717

Arista NG Firewall(0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

6.6

First published (updated )

ZDI-24-1720

Arista NG FirewallZDI-24-1720: (0Day) Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

6.6

First published (updated )

ZDI-CAN-24324

Arista NG Firewall(0Day) Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

8.1

First published (updated )

ZDI-24-1718

Arista NG FirewallZDI-24-1718: (0Day) Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

8.1

First published (updated )

ZDI-CAN-24019

Never miss a vulnerability like this again

Arista NG FirewallZDI-24-1719: (0Day) Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

8.3

First published (updated )

ZDI-CAN-24325

Arista NG Firewall(0Day) Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

8.3

First published (updated )

ZDI-24-1719

Qualcomm Apq8053 FirmwareLast updated 29 November 2024

6.5

First published (updated )

CVE-2020-3702

Linux Linux kernelLast updated 29 November 2024

5.4

First published (updated )

CVE-2020-26147

redhat/kernelLast updated 29 November 2024

5.3

First published (updated )

CVE-2020-26139

Never miss a vulnerability like this again

Linux Linux kernelLast updated 29 November 2024

low

3.1

First published (updated )

CVE-2020-24587

Microsoft Windows 10Input Validation

4.3

First published (updated )

CVE-2020-24588

Linux Linux kernelLast updated 29 November 2024

4.3

First published (updated )

CVE-2020-24586

Linux Linux kernelUse After Free

First published (updated )

CVE-2017-18017

IBM QRadar Security Information and Event ManagerGNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Exploited

First published (updated )

CVE-2014-7169

Never miss a vulnerability like this again

IBM QRadar Security Information and Event ManagerGNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Exploited

First published (updated )

CVE-2014-6271

Arista EOSOn affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets

6.5

First published (updated )

CVE-2023-24548

Arista EOSOn affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel panic and cause system reload.

7.5

First published (updated )

CVE-2023-3646

Arista EOSAn issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the denied requests being forwarded to the agent.

7.1

First published (updated )

CVE-2021-28507

Arista TerminattrAn issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

9.1

First published (updated )

CVE-2021-28501

Never miss a vulnerability like this again

Arista EOSIn Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.

9.8

First published (updated )

CVE-2021-28503

Arista EOSTerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP

6.1

First published (updated )

CVE-2021-28509

Arista EOSAn issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.

9.1

First published (updated )

CVE-2021-28500

Arista EOSIn Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the device.

6.5

First published (updated )

CVE-2021-28496

Arista EOSThis advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches t ...

6.5

First published (updated )

CVE-2021-28511

Never miss a vulnerability like this again