Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 8:44 a.m.4 views

CVE-2024-45098

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

8.1CVSS6.7AI score0.00042EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2021-45098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of...

7.5CVSS7.2AI score0.00404EPSS
Exploits1References1
Circl
Circl
added 2024/09/05 6:52 p.m.0 views

CVE-2024-45098

creationtimestamp| type| source ---|---|--- 2024-09-05 18:52:47+00:00| seen| https://t.me/cvedetector/4926...

8.1CVSS4.8AI score0.00042EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/05 3:31 p.m.15 views

CVE-2024-45098 IBM Aspera Faspex bypass security

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

6.8CVSS0.00042EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/04 5:20 p.m.20 views

Security Bulletin: IBM Aspera Faspex 5 has addressed multiple vulnerabilities (CVE-2024-45097, CVE-2024-45096, CVE-2024-45098)

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Aspera Faspex 5.0.10 Vulnerability Details CVEID:CVE-2024-45097 DESCRIPTION: IBM Aspera Faspex could allow a user to bypass intended access restrictions and conduct resource modification. CVSS Base...

8.1CVSS6.7AI score0.00142EPSS
Exploits0Affected Software6
Circl
Circl
added 2023/02/01 12:14 p.m.1 views

CVE-2022-45098

creationtimestamp| type| source ---|---|--- 2023-02-01 12:14:13+00:00| seen| https://t.me/cibsecurity/57270 2025-03-26 20:25:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8954...

6.1CVSS5.5AI score0.00028EPSS
Exploits0References2
Circl
Circl
added 2021/12/16 7:37 a.m.1 views

CVE-2021-45098

creationtimestamp| type| source ---|---|--- 2021-12-16 07:37:14+00:00| seen| https://t.me/cibsecurity/34128...

7.5CVSS7.1AI score0.00404EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/12/16 4:7 a.m.25 views

CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

7.5CVSS7.5AI score0.00404EPSS
Exploits1
Cvelist
Cvelist
added 2021/12/16 4:7 a.m.15 views

CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option...

7.8AI score0.00404EPSS
Exploits1References4
CVE
CVE
added 2021/12/16 4:7 a.m.80 views

CVE-2021-45098

CVE-2021-45098 affects Suricata (pre-6.0.4). Core issue: an attacker can bypass HTTP-based signature checks by spoofing an RST TCP packet with random md5header options, injecting an RST ACK after the 3‑way handshake, leading the server to deliver HTTP responses for forbidden URLs without triggeri...

7.5CVSS7.4AI score0.00404EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder