CVE-2021-23034

On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical...

Code injection

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

CVE-2021-23034

CVE-2021-23034 affects F5 BIG-IP TMM when a DNS profile using a DNS cache resolver is configured on a virtual server; undisclosed DNS requests can terminate the TMM process, causing DoS. Affected versions include BIG-IP 16.x before 16.1.0 and 15.1.x before 15.1.3.1. Public sources in connected do...

CVE-2021-23032

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...

CVE-2021-23033

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

CVE-2021-38176

creationtimestamp| type| source ---|---|--- 2021-09-14 16:22:06+00:00| seen| https://t.me/cibsecurity/28809 2021-09-16 15:55:40+00:00| seen| https://t.me/truesecator/2111...

CVE-2021-38177

creationtimestamp| type| source ---|---|--- 2021-09-14 16:22:00+00:00| seen| https://t.me/cibsecurity/28805 2021-09-16 15:55:40+00:00| seen| https://t.me/truesecator/2111...

CVE-2021-38162

creationtimestamp| type| source ---|---|--- 2021-09-14 16:21:54+00:00| seen| https://t.me/cibsecurity/28802 2021-09-16 15:55:40+00:00| seen| https://t.me/truesecator/2111...

CVE-2021-23053

creationtimestamp| type| source ---|---|--- 2021-09-14 16:21:53+00:00| seen| https://t.me/cibsecurity/28800...

CVE-2021-37535

creationtimestamp| type| source ---|---|--- 2021-09-14 16:21:52+00:00| seen| https://t.me/cibsecurity/28799 2021-09-16 15:55:40+00:00| seen| https://t.me/truesecator/2111 2023-05-25 07:00:04+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/333 2026-07-29 12:02:28+00:00| seen|...

CVE-2021-33674

creationtimestamp| type| source ---|---|--- 2021-09-14 16:21:45+00:00| seen| https://t.me/cibsecurity/28793 2021-09-16 15:55:40+00:00| seen| https://t.me/truesecator/2111...

Design/Logic Flaw

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM performs Online Certificate Status Protocol OCSP verification of a certificate that contains Authority Information Access AIA, undisclosed requests may cau...

CVE-2021-23047

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM performs Online Certificate Status Protocol OCSP verification of a certificate that contains Authority Information Access AIA, undisclosed requests may cau...

Digi PortServer TS 16

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Digi International, Inc. Equipment: PortServer TS 16 Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability allows write access, which grants control of...

Digi PortServer TS 访问控制错误漏洞

Digi PortServer TS is used by Digital Networks Malaysia Digi for easy serial to Ethernet connectivity. An Access Control Error vulnerability exists in Digi PortServer TS 16, which stems from properly formatted POST requests for multiple resources on the software's HTTP and HTTPS web servers that ...

CVE-2020-27970

creationtimestamp| type| source ---|---|--- 2021-09-13 16:14:47+00:00| seen| https://t.me/cibsecurity/28716...

CVE-2021-33011

creationtimestamp| type| source ---|---|--- 2021-09-10 16:30:39+00:00| seen| https://t.me/cibsecurity/28661...

CVE-2021-36871

creationtimestamp| type| source ---|---|--- 2021-09-09 16:29:57+00:00| seen| https://t.me/cibsecurity/28584...

CVE-2021-40377

SmarterTools SmarterMail 16.x before build 7866 has stored XSS. The application fails to sanitize email content, thus allowing one to inject HTML and/or JavaScript into a page that will then be processed and stored by the application...

Smartertools SmarterTools SmarterMail 跨站脚本漏洞

Smartertools SmarterTools SmarterMail is a set of mail server software from SmarterTools Smartertools, USA. The program supports spam filtering, statistics, simple mail transfer protocol SMTP authentication and other features. A security vulnerability exists in SmarterTools SmarterMail versions...