CVE-2021-1446

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

CVE-2021-1446

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

Tomas Buchaillot Tyk API Gateway path traversal vulnerability

Tomas Buchaillot Tyk API Gateway is Tomas Buchaillot an open source application . It is an open source enterprise API gateway that supports REST, GraphQL, TCP and gRPC protocols. Tomas Buchaillot Tyk API Gateway suffers from a path traversal vulnerability that stems from directory traversal by th...

Informational: PAN-OS: NAT slipstreaming v1.0 and v2.0 attacks

Network address translation NAT slipstreaming attacks v1.0 and v2.0 are network-based and they exploit weaknesses in web browsers and Application Level Gateways ALGs to expose internal network devices to an attacker. The following threat prevention signatures prevent NAT slipstreaming attacks: NA...

Security Bulletin: Multiple Vulnerabilities fixed in IBM Application Gateway

Summary Multiple Security vulnerabilties have been fixed in the IBM Application Gateway product. Vulnerability Details CVEID: CVE-2020-4225 DESCRIPTION: IBM App Gateway does not properly validate the tenant configuration which could allow a local user to obtain highly sensitive information or...

MS10-089: Vulnerabilities in Forefront Unified Access Gateway and Microsoft Intelligent Application Gateway could cause elevation of privilege

Resolves vulnerabilities in Forefront Unified Access Gateway UAG that could allow elevation of privilege if a user visits an affected Web site using a specially crafted URL.INTRODUCTIONMicrosoft has released security bulletin MS10-089. To view the complete security bulletin, visit the following...

Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG

A Denial of Service vulnerability in the SIP application layer gateway ALG component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC, MS-MPC, MS-DPC or SRX flow daemon flowd process. This issue affects Junos OS devices with NAT or stateful firewall configuration in...

CVE-2018-0002

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

CVE-2017-10608

Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. This vulnerability in the Sun/MS-RPC ALG services component of Junos OS allows an attacker to cause a repeated denial of service against the target...

Arbitrary File Traversal Vulnerability in Ampcom Application Gateway

Ambient Application Gateway is an inter-network device developed by Beijing Ambient Technology Co., Ltd. to interconnect one network with another and provide specific applications. An arbitrary file traversal vulnerability exists in the ABT Application Gateway. An attacker can use user-controllab...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

No description provided by source. $Id: mswhalecheckforupdates.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

CVE-2012-2632

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

Design/Logic Flaw

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

CVE-2012-2632

CVE-2012-2632 affects SEIL routers with firmware SEIL/x86 1.00–2.35, SEIL/X1 2.30–3.75, SEIL/X2 2.30–3.75, and SEIL/B1 2.30–3.75. The vulnerability arises from improper handling of the CONNECT command when http-proxy and application-gateway features are enabled, allowing remote attackers to bypas...

CVE-2012-2632

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

PT-2012-4144

Name of the Vulnerable Software and Affected Versions SEIL routers versions SEIL/x86 1.00 through 2.35 SEIL/X1 versions 2.30 through 3.75 SEIL/X2 versions 2.30 through 3.75 SEIL/B1 versions 2.30 through 3.75 Description The issue arises when the http-proxy and application-gateway features are...

CVE-2012-2632: Undefined Security Weakness

SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/X1 2.30 through 3.75, SEIL/X2 2.30 through 3.75, and SEIL/B1 2.30 through 3.75, when the http-proxy and application-gateway features are enabled, do not properly handle the CONNECT command, which allows remote attackers to bypass intende...

Microsoft Security Bulletin MS10-089 - Important Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Elevation of Privilege (2316074)

Microsoft Security Bulletin MS10-089 - Important Vulnerabilities in Forefront Unified Access Gateway UAG Could Allow Elevation of Privilege 2316074 Published: November 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves four privately reported vulnerabilities...

Microsoft Whale Intelligent Application Gateway ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft Whale...

Microsoft IAG 2007 ActiveX控件栈缓冲区溢出漏洞

BUGTRAQ ID: 34532 CVE ID：CVE-2007-2238 CNCVE ID：CNCVE-20072238 Microsoft Intelligent Application Gateway是一款智能应用程序网关，提供SSL VPN功能。 Microsoft Whale Intelligent Application Gateway Whale客户端组件ActiveX控件存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...