deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-8979
Published: 2024-11-15
Description: The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the 'init_content_lostpassword_user_email_controls' function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including usernames and passwords of any user, including Administrators, as long as that user opens the email notification for a password change request and images are not blocked by the email client.
CVSS Score: 8.0 (HIGH)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Elements/Login_Register.php#L2440; https://plugins.trac.wordpress.org/changeset/3188634/; https://www.wordfence.com/threat-intel/vulnerabilities/id/34d09086-be33-40cf-b5bf-d6c03cf0b68a?source=cve
CVE: CVE-2021-3740
Published: 2024-11-15
Description: A Session Fixation vulnerability exists in chatwoot/chatwoot versions prior to 2.4.0. The application does not invalidate existing sessions on other devices when a user changes their password, allowing old sessions to persist. This can lead to unauthorized access if an attacker has obtained a session token.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-384
References: https://github.com/chatwoot/chatwoot/commit/6fdd4a29969be8423f31890b807d27d13627c50c; https://huntr.com/bounties/[PII_REDACTED]37-chatwoot/chatwoot
CVE: CVE-2021-3741
Published: 2024-11-15
Description: A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.6. The vulnerability occurs when a user uploads an SVG file containing a malicious XSS payload in the profile settings. When the avatar is opened in a new page, the custom JavaScript code is executed, leading to potential security risks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/chatwoot/chatwoot/commit/6fdd4a29969be8423f31890b807d27d13627c50c; https://huntr.com/bounties/[PII_REDACTED]57-chatwoot/chatwoot
CVE: CVE-2021-3742
Published: 2024-11-15
Description: A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerability allows an attacker to upload an SVG file containing a malicious SSRF payload. When the SVG file is used as an avatar and opened in a new tab, it can trigger the SSRF, potentially leading to host redirection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://github.com/chatwoot/chatwoot/commit/6fdd4a29969be8423f31890b807d27d13627c50c; https://huntr.com/bounties/[PII_REDACTED]21-chatwoot/chatwoot
CVE: CVE-2021-3838
Published: 2024-11-15
Description: DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files of any type to the server can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution, especially when DOMPdf is used with frameworks with documented POP chains like Laravel or vulnerable developer code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/dompdf/dompdf/commit/99aeec1efec9213e87098d42eb09439e7ee0bb6a; https://huntr.com/bounties/0bdddc12-ff67-4815-ab9f-6011a974f48e
CVE: CVE-2021-3841
Published: 2024-11-15
Description: sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the user's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/sylius/sylius/commit/3da169e0c23e752974d74223cc536c29a2a82edc; https://huntr.com/bounties/[PII_REDACTED]78-Sylius/Sylius
CVE: CVE-2021-3902
Published: 2024-11-15
Description: An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. This issue affects all versions prior to 2.0.0. The vulnerability can be exploited even if the isRemoteEnabled option is set to false. It allows attackers to perform SSRF, disclose internal image files, and cause PHAR deserialization attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: https://github.com/dompdf/dompdf/commit/f56bc8e40be6c0ae0825e6c7396f4db80620b799; https://huntr.com/bounties/a6071c07-806f-429a-8656-a4742e4191b1
CVE: CVE-2021-3986
Published: 2024-11-15
Description: A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they do not own. This vulnerability discloses private information and affects all versions prior to the fix.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://github.com/janeczku/calibre-web/commit/6f5390ead5df9779ac81fadefffb476e03f93548; https://huntr.com/bounties/394af194-61a7-4e33-b373-877d4c766fca
CVE: CVE-2021-3987
Published: 2024-11-15
Description: An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without public shelf permissions to create public shelves. The vulnerability is due to the `create_shelf` method in `shelf.py` not verifying if the user has the necessary permissions to create a public shelf. This issue can lead to unauthorized actions being performed by users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://github.com/janeczku/calibre-web/commit/bcdc[PII_REDACTED]5af486964537f3821f47b28874; https://huntr.com/bounties/29fcc091-87b6-43bc-ab4b-3c0bec3f71df
CVE: CVE-2021-3988
Published: 2024-11-15
Description: A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. The vulnerability occurs when editing book properties, such as uploading a cover or a format. The affected code directly inserts user input into the DOM without proper sanitization, allowing attackers to execute arbitrary JavaScript code. This can lead to various attacks, including stealing cookies. The issue is present in the code handling the `#btn-upload-cover` change event.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/janeczku/calibre-web/commit/7ad419dc8c12180e842a82118f4866ac3d074bc5; https://huntr.com/bounties/fa4c8fd1-7846-4dad-9112-2c07461f0609
CVE: CVE-2021-3991
Published: 2024-11-15
Description: An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section is able to access specific reception details via direct URL access, bypassing the intended permission restrictions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285, CWE-639
References: https://github.com/dolibarr/dolibarr/commit/63cd06394f39d60784d6e6a0ccf4867a71a6568f; https://huntr.com/bounties/58ddbd8a-0faf-4b3f-aec9-5850bb19ab67
CVE: CVE-2022-1226
Published: 2024-11-15
Description: A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim. This vulnerability affects the import Data set feature via a spreadsheet file upload. The affected endpoints include import-vlan-preview.php, import-subnets-preview.php, import-vrf-preview.php, import-ipaddr-preview.php, import-devtype-preview.php, import-devices-preview.php, and import-l2dom-preview.php. The vulnerability can be exploited by uploading a specially crafted spreadsheet file containing malicious JavaScript payloads, which are then executed in the context of the victim's browser. This can lead to defacement of websites, execution of malicious JavaScript code, stealing of user cookies, and unauthorized access to user accounts.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/commit/50e36b9e4fff5eaa51dc6e42bc684748da378002; https://huntr.com/bounties/3fdcf653-fe26-4592-94a1-98ce664618ec
CVE: CVE-2022-1884
Published: 2024-11-15
Description: A remote command execution vulnerability exists in gogs/gogs versions <=0.12.7 when deployed on a Windows server. The vulnerability arises due to improper validation of the `tree_path` parameter during file uploads. An attacker can set `tree_path=.git.` to upload a file into the .git directory, allowing them to write or rewrite the `.git/config` file. If the `core.sshCommand` is set, this can lead to remote command execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-77
References: https://huntr.com/bounties/9cd4e7b7-0979-4e5e-9a1c-388b58dea76b
CVE: CVE-2023-0109
Published: 2024-11-15
Description: A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript file containing a malicious script and reference it in an HTML file. When the HTML file is accessed, the malicious script is executed. This can lead to the theft of sensitive information, such as login credentials, from users visiting the affected website. The issue has been fixed in version 0.10.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/usememos/memos/commit/46c13a4b7f675b92d297df6dabb4441f13c7cd9c; https://huntr.com/bounties/1899ffb2-ce1e-4dc0-af96-972612190f6e
CVE: CVE-2023-0737
Published: 2024-11-15
Description: wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/delete endpoint. This issue is fixed in version 2.5.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/wallabag/wallabag/commit/268372dbbdd7ef87b84617fdebf95d0a86caf7dc; https://huntr.com/bounties/4ba20fe7-4061-4dfb-ab2f-ecaf110641a5
CVE: CVE-2023-2332
Published: 2024-11-15
Description: A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser, potentially stealing cookies or redirecting users to malicious sites. The issue is fixed in version 10.5.21.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/a[PII_REDACTED]d879141a3fdf0986a9dd3d891abfe; https://huntr.com/bounties/e436ed71-6741-4b30-89db-f7f3de4aca2c
CVE: CVE-2023-4679
Published: 2024-11-15
Description: A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/commit/b68b3f0bf5c366e003221d78fd663a1d5514a876; https://huntr.com/bounties/6f721ee7-8785-4c26-801e-f40fed3faaac
CVE: CVE-2024-0787
Published: 2024-11-15
Description: phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by using the 'X-Forwarded-For' header. The issue lies in the 'get_user_ip()' function in 'class.Common.php' at lines 1044 and 1045, where the presence of the 'X-Forwarded-For' header is checked and used instead of 'REMOTE_ADDR'. This vulnerability allows attackers to perform brute force attacks on user accounts, including the admin account. The issue is fixed in version 1.7.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-307
References: https://github.com/phpipam/phpipam/commit/55c2056068be9f1359e967fcff64db6b7f4d00b5; https://huntr.com/bounties/840cb582-1feb-43ab-9cc4-e4b5a63c5bab
CVE: CVE-2024-0875
Published: 2024-11-15
Description: A stored cross-site scripting (XSS) vulnerability exists in openemr/openemr version 7.0.1. An attacker can inject malicious payloads into the 'inputBody' field in the Secure Messaging feature, which can then be sent to other users. When the recipient views the malicious message, the payload is executed, potentially compromising their account. This issue is fixed in version 7.0.2.1.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/openemr/openemr/commit/d141d2ca06fb2171a202c7302dd5d5af8539f255; https://huntr.com/bounties/16cba0fc-748d-4ea8-9573-1f6fbe9a27c9
CVE: CVE-2024-10443
Published: 2024-11-15
Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photos before 1.6.2-0720 and 1.7.0-0795 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-77
References: https://www.synology.com/en-global/security/advisory/Synology_SA_24_18; https://www.synology.com/en-global/security/advisory/Synology_SA_24_19
CVE: CVE-2024-10534
Published: 2024-11-15
Description: Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems (PACS) / Access Control Security Systems (ACSS) allows Traffic Injection.This issue affects Personnel Attendance Control Systems (PACS) / Access Control Security Systems (ACSS): before 2024.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-346
References: https://www.usom.gov.tr/bildirim/tr-24-1856
CVE: CVE-2024-11182
Published: 2024-11-15
Description: An XSS issue was discovered in 

MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message 
with 
JavaScript in an img tag. This could
 allow a remote attacker

to load arbitrary JavaScript code in the context of a webmail user's browser window.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11182
CVE: CVE-2024-1097
Published: 2024-11-15
Description: A stored cross-site scripting (XSS) vulnerability exists in craigk5n/webcalendar version 1.3.0. The vulnerability occurs in the 'Report Name' input field while creating a new report. An attacker can inject malicious scripts, which are then executed in the context of other users who view the report, potentially leading to the theft of user accounts and cookies.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://huntr.com/bounties/6dd501f6-6047-4ddb-8b14-f0fc53cdc28e
CVE: CVE-2024-1240
Published: 2024-11-15
Description: An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/pyload/pyload/commit/fe94451dcc2be90b3889e2fd9d07b483c8a6dccd; https://huntr.com/bounties/eef9513d-ccc3-4030-b574-374c5e7b887e
CVE: CVE-2023-4348
Published: 2024-11-15
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-11237
Published: 2024-11-15
Description: A vulnerability, which was classified as critical, has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected by this issue is some unknown functionality of the component DHCP DISCOVER Packet Parser. The manipulation of the argument hostname leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-121, CWE-787
References: https://github.com/Zephkek/TP-Thumper; https://github.com/Zephkek/TP-Thumper/blob/main/poc.c; https://vuldb.com/?ctiid.284672
CVE: CVE-2024-11238
Published: 2024-11-15
Description: A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/CoinIsMoney/TempGuide/blob/main/LL-exp-02.pdf; https://vuldb.com/?ctiid.284673; https://vuldb.com/?id.284673
CVE: CVE-2024-11239
Published: 2024-11-15
Description: A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the component API Interface. The manipulation of the argument folder leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/CoinIsMoney/TempGuide/blob/main/LL-exp-03.pdf; https://vuldb.com/?ctiid.284674; https://vuldb.com/?id.284674
CVE: CVE-2024-11240
Published: 2024-11-15
Description: A vulnerability was found in IBPhoenix ibWebAdmin up to 1.0.2 and classified as problematic. This issue affects some unknown processing of the file /database.php of the component Banco de Dados Tab. The manipulation of the argument db_login_role leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://docs.google.com/document/d/1_kk14QhqJuqMGzAD_SUlOSvCGwYdeF4gI8m7mVTPBAQ/edit?usp=sharing; https://vuldb.com/?ctiid.284675; https://vuldb.com/?id.284675
CVE: CVE-2023-20125
Published: 2024-11-15
Description: A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.

This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An attacker could exploit this vulnerability by sending a high rate of TCP connections to the server. A successful exploit could allow the attacker to cause TCP connection resources to grow rapidly until the Cisco BroadWorks Network Server becomes unusable.
Note: To recover from this vulnerability, either Cisco BroadWorks Network Server software must be restarted or the Cisco BroadWorks Network Server node must be rebooted. For more information, see the  section of this advisory.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bw-tcp-dos-KEdJCxLs
CVE: CVE-2023-20154
Published: 2024-11-15
Description: A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges.

This vulnerability is due to the improper handling of certain messages that are returned by the associated external authentication server. An attacker could exploit this vulnerability by logging in to the web interface of an affected server. Under certain conditions, the authentication mechanism would be bypassed and the attacker would be logged in as an administrator. A successful exploit could allow the attacker to obtain administrative privileges on the web interface of an affected server, including the ability to access and modify every simulation and all user-created data. To exploit this vulnerability, the attacker would need valid user credentials that are stored on the associated external authentication server.
Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-305
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cml-auth-bypass-4fUCCeG5
CVE: CVE-2024-10691
Published: 2024-11-15
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-9530. Reason: This candidate is a reservation duplicate of CVE-2024-9530. Notes: All CVE users should reference CVE-2024-9530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2024-11241
Published: 2024-11-15
Description: A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/Anti-Entropy-Zhurong/cve/blob/main/sql-1.md; https://vuldb.com/?ctiid.284677
CVE: CVE-2024-11242
Published: 2024-11-15
Description: A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ad_list.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/En0t5/vul/blob/main/zzcms/zzcms-add_list-sql-inject.md; https://vuldb.com/?ctiid.284678; https://vuldb.com/?id.284678
CVE: CVE-2024-11243
Published: 2024-11-15
Description: A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument m2 with the input <svg%20onload=alert(document.cookie)> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://code-projects.org/; https://github.com/sh3rl0ckpggp/0day/blob/main/code-projects_online-shop_CrossSiteScripting.md; https://vuldb.com/?ctiid.284679
CVE: CVE-2024-20373
Published: 2024-11-15
Description: A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control list (ACL) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic.&nbsp;

This vulnerability exists because Cisco IOS Software and Cisco IOS XE Software do not support extended IPv4 ACLs for SNMP, but they do allow administrators to configure extended named IPv4 ACLs that are attached to the SNMP server configuration without a warning message. This can result in no ACL being applied to the SNMP listening process. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP operations that should be denied. The attacker has no control of the SNMP ACL configuration and would still need a valid SNMP version 2c (SNMPv2c) community string or SNMP version 3 (SNMPv3) user credentials.
SNMP with IPv6 ACL configurations is not affected.
For more information, see the  section of this advisory.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-uwBXfqww