Lucene search
+L

3450 matches found

CVE
CVE
•added 2020/04/29 12:59 p.m.•40 views

CVE-2019-7634

CVE-2019-7634 affects the SUAP V2 web application, where a cross-site scripting (XSS) flaw occurs during the update of user information. Connected sources indicate the root cause as insufficient validation of client data, enabling injection of script in user-update flows. The NVD metrics show a n...

5.4CVSS5.3AI score0.00551EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/04/29 12:00 a.m.•1 views

PT-2020-11249

Name of the Vulnerable Software and Affected Versions SUAP V2 affected versions not specified Description The issue allows for XSS during the update of user information. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

5.4CVSS0.00551EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/29 12:00 a.m.•6 views

CVE-2019-7634: Improper Neutralization of Input During Web Page Generation

SUAP V2 allows XSS during the update of user information...

5.4CVSS6AI score0.00551EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/27 3:15 p.m.•30 views

CVE-2020-11810

An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be...

3.7CVSS6.6AI score
SaveExploits0References8
OSV
OSV
•added 2020/04/27 3:15 p.m.•25 views

UBUNTU-CVE-2020-11810

An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be...

3.7CVSS6.8AI score0.0165EPSS
SaveExploits1References3
Mend
Mend
•added 2020/04/27 2:47 p.m.•3 views

CVE-2020-11810

An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be...

6.3CVSS0.0165EPSS
SaveExploits1References12
OSV
OSV
•added 2020/04/24 2:15 p.m.•14 views

CVE-2017-18724

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42...

8.8CVSS6.2AI score0.00786EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/22 8:15 p.m.•19 views

CVE-2018-21151

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54...

6.8CVSS6.1AI score0.00682EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/22 3:15 p.m.•13 views

CVE-2017-18784

Certain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1.0.1.52, JNR1010v2 before 1.1.0.44, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.20, R6020 before 1.0.0.26, R6050 before 1.0.1.12, R6080 before 1.0.0.26, R6120 before 1.0.0.36, R6220 before 1.1.0.60...

6.1CVSS5.8AI score0.00631EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/20 4:15 p.m.•15 views

CVE-2017-18841

Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.46, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.46, and D7000 before 1.0.1.50...

6.7CVSS5.8AI score0.00557EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/17 12:00 a.m.•1 views

PT-2020-2060

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.4.x through 2.4.8 Description An issue was discovered in OpenVPN where an attacker can inject a data channel v2 P DATA V2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before...

4.3CVSS0.0165EPSS
SaveExploits1References60
OSV
OSV
•added 2020/04/16 7:15 p.m.•20 views

CVE-2019-20721

Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX2700 before 1.0.1.48, EX6100v2 before 1.0.1.76, EX6150v2 before 1.0.1.76, EX6200v2 before 1.0.1.72, EX6400 before 1.0.2.136, EX7300 before 1.0.2.136, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900...

4.8CVSS5.8AI score0.00522EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/13 1:15 p.m.•7 views

DEBIAN-CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.9AI score0.01625EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/13 1:15 p.m.•33 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.5AI score
SaveExploits0References3
NVD
NVD
•added 2020/04/13 1:15 p.m.•30 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.3AI score0.01625EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2020/04/13 1:15 p.m.•47 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.8AI score0.01625EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/13 1:15 p.m.•19 views

UBUNTU-CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS7AI score0.01625EPSS
SaveExploits0References3
CVE
CVE
•added 2020/04/13 12:04 p.m.•243 views

CVE-2020-1759

CVE-2020-1759 affects Red Hat Ceph Storage 4 and Red Hat OpenShift Container Storage 4.2, where the secure mode of the messenger v2 protocol (msgr2) allows nonce reuse. This enables forging authentication tags and can lead to confidentiality and integrity problems in sessions when a nonce is reus...

6.8CVSS6.5AI score0.01625EPSS
SaveExploits0References3Affected Software3
AlpineLinux
AlpineLinux
•added 2020/04/13 12:04 p.m.•159 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.8CVSS6.8AI score0.01625EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/04/13 12:04 p.m.•57 views

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...

6.4CVSS6.7AI score0.01625EPSS
SaveExploits0References3
Rows per page
Query Builder