Lucene search
+L

175 matches found

Positive Technologies
Positive Technologies
•added 2015/03/20 12:00 a.m.•3 views

PT-2017-6610

Name of the Vulnerable Software and Affected Versions Drupal versions 6.x through 6.34 Drupal versions 7.x through 7.34 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the "//" initial sequence in URL-relate...

9.8CVSS0.99991EPSS
SaveExploits63References62
CVE
CVE
•added 2015/03/14 1:00 a.m.•59 views

CVE-2014-5409

CVE-2014-5409 affects GE Digital Energy Hydran M2 devices with the 17046 Ethernet option. The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL does not generate proper random TCP Initial Sequence Numbers, enabling an attacker to predict sequence values and spoof packets. Exploitation could b...

6.4CVSS6.8AI score0.02718EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2015/03/14 1:00 a.m.•42 views

CVE-2014-5409 GE Hydran M2 Predictable Value Range from Previous Values

The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers ISNs, which makes it easier for remote attackers to spoof packets by predicting these values...

6.4CVSS6.6AI score0.02718EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/03/14 12:00 a.m.•4 views

CVE-2014-5409: Predictable Value Range from Previous Values

The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers ISNs, which makes it easier for remote attackers to spoof packets by predicting these values...

6.4CVSS5.9AI score0.02718EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2013/04/22 12:00 a.m.•1482 views

TCP/IP Predictable TCP Initial Sequence Number Vulnerability

The remote host has predictable TCP sequence numbers. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.31392EPSS
SaveExploits3References6
OpenVAS
OpenVAS
•added 2009/05/05 12:00 a.m.•50 views

HP-UX Update for ARPA Transport HPSBUX00205

Check for the Version of ARPA Transport OpenVAS Vulnerability Test HP-UX Update for ARPA Transport HPSBUX00205 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

5CVSS1.2AI score0.18125EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2009/05/05 12:00 a.m.•54 views

HP-UX Update for ARPA Transport HPSBUX00205

Check for the Version of ARPA Transport OpenVAS Vulnerability Test HP-UX Update for ARPA Transport HPSBUX00205 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

5CVSS1.1AI score0.18125EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/21 12:00 a.m.•8 views

CVE-2007-2782: Undefined Security Weakness

Packeteer PacketShaper uses fixed increments in TCP initial sequence number ISN values, which allows remote attackers to predict the ISN value, and perform session hijacking or disruption...

7.5CVSS7.3AI score0.01601EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2005/07/19 12:00 a.m.•109 views

HPSBTU01210 SSRT4743, SSRT4884 rev.0 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBTU01210 REVISION: 0 SSRT4743, SSRT4884 rev.0 - HP Tru64 UNIX TCP/IP remote Denial of Service DoS NOTICE: There are no restrictions for distribution of this Security Bulletin provided that it remains complete and intact. The...

5CVSS0.80101EPSS
SaveExploits16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/14 12:00 a.m.•5 views

CVE-2001-0163: Undefined Security Weakness

Cisco AP340 base station produces predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

4.6CVSS5.8AI score0.02799EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/14 12:00 a.m.•4 views

CVE-2001-0162: Undefined Security Weakness

WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

7.5CVSS7.3AI score0.15229EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2005/02/16 12:00 a.m.•62 views

HP-UX PHNE_25644 : s700_800 11.11 cumulative ARPA Transport patch

s700800 11.11 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of ServiceDo...

5CVSS7.1AI score0.80101EPSS
SaveExploits16References7
Cvelist
Cvelist
•added 2004/09/01 4:00 a.m.•52 views

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

7.5AI score0.06912EPSS
SaveExploits1References5
NVD
NVD
•added 2004/08/05 4:00 a.m.•28 views

CVE-2004-0641

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

7.5CVSS6.8AI score0.02611EPSS
SaveExploits1References5
securityvulns
securityvulns
•added 2004/04/21 12:00 a.m.•167 views

US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-111A archive Vulnerabilities in TCP Original release date: April 20, 2004 Last revised: -- Source: US-CERT Systems Affected Systems that rely on persistent TCP connections, for example routers supporting BGP Overvie...

5CVSS0.1AI score0.80286EPSS
SaveExploits10
securityvulns
securityvulns
•added 2002/08/03 12:00 a.m.•55 views

Security Advisory: Raptor Firewall Weak ISN Vulnerability

+==================================================================+ | Ubizen Security Advisory: Raptor Firewall Weak ISN Vulnerability | +==================================================================+ | [email protected] Friday August 02, 2002 |...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2002/08/02 12:00 a.m.•1601 views

TCP/IP Initial Sequence Number (ISN) Reuse Weakness

The remote host seems to generate Initial Sequence Numbers ISN in a weak manner which seems to solely depend on the source and dest port of the TCP packets. An attacker may exploit this flaw to establish spoofed connections to the remote host. The Raptor Firewall and Novell NetWare are known to b...

7.5CVSS7.3AI score0.06912EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2002/03/09 5:00 a.m.•36 views

CVE-2001-0751

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers ISN, which allows remote attackers to spoof or hijack TCP connections...

6.7AI score0.02615EPSS
SaveExploits1References2
NVD
NVD
•added 2001/10/18 4:00 a.m.•27 views

CVE-2001-0751

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers ISN, which allows remote attackers to spoof or hijack TCP connections...

7.5CVSS6.7AI score0.02615EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2001/09/12 4:00 a.m.•34 views

CVE-1999-1150

Livingston Portmaster routers running ComOS use the same initial sequence number ISN for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions...

6.8AI score0.01351EPSS
SaveExploits0References2
Rows per page
Query Builder