Lucene search
+L

590 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/27 12:00 a.m.•6 views

CVE-2019-1746: Improper Input Validation

A vulnerability in the Cluster Management Protocol CMP processing code in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation wh...

7.4CVSS5.9AI score0.0064EPSS
SaveExploits0References3
Fedora
Fedora
•added 2019/03/15 6:30 p.m.•41 views

[SECURITY] Fedora 29 Update: kubernetes-1.12.5-2.fc29

Container cluster management...

9.8CVSS8.1AI score0.86978EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
•added 2019/03/01 12:00 a.m.•8 views

The vulnerability of the Kubernetes cluster management software, related to improper error handling, allows a perpetrator to escalate their privileges.

The vulnerability of the Kubernetes cluster management software is related to incorrect error handling. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

9.8CVSS8.2AI score0.86978EPSS
SaveExploits10References3Affected Software1
Fedora
Fedora
•added 2019/02/09 2:17 a.m.•25 views

[SECURITY] Fedora 29 Update: slurm-17.11.13-2.fc29

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

9.8CVSS1.7AI score0.02332EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2018/12/27 12:00 a.m.•19 views

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol allows a attacker to cause a service failure in Cisco IOS and Cisco IOS XE operating systems.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures using...

7.4CVSS7.2AI score0.00856EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2018/12/10 12:00 a.m.•8 views

PT-2018-2976 · Clusterlabs +5 · Pacemaker +5

Name of the Vulnerable Software and Affected Versions: Pacemaker versions up to and including 2.0.1 Description: The issue is related to an uncontrolled resource consumption in the Pacemaker cluster resource management software, which can be exploited to cause a denial of service DoS. This could...

9CVSS6.4AI score0.01901EPSS
SaveExploits0References91
RedHat Linux
RedHat Linux
•added 2018/11/20 3:11 a.m.•12 views

atomic-openshift: oc patch with json causes masterapi service crash

An out of bounds write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform 3.x. An attacker can use this flaw to cause a denial of service attack on the Openshift master API service which provides cluster management...

7.7CVSS7.2AI score0.01936EPSS
SaveExploits0References4
OSV
OSV
•added 2018/10/05 2:29 p.m.•16 views

CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4CVSS5.8AI score0.00856EPSS
SaveExploits0References3
NVD
NVD
•added 2018/10/05 2:29 p.m.•31 views

CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4CVSS7.4AI score0.00856EPSS
SaveExploits0References3
Prion
Prion
•added 2018/10/05 2:29 p.m.•26 views

Input validation

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

6.1CVSS7.3AI score0.00856EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
•added 2018/10/05 2:00 p.m.•19 views

CVE-2018-0475 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

6.9AI score0.00856EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2018/10/05 2:00 p.m.•41 views

CVE-2018-0475 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4AI score0.00856EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/10/05 12:00 a.m.•95 views

Cisco IOS XE Software Cluster Management Protocol DoS Vulnerability (cisco-sa-20180926-cmp)

According to its self-reported version, the IOS XE is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

7.4CVSS7.3AI score0.00856EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/05 12:00 a.m.•6 views

CVE-2018-0475: Improper Input Validation

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4CVSS7.2AI score0.00856EPSS
SaveExploits0References3
CNVD
CNVD
•added 2018/09/29 12:00 a.m.•23 views

Cisco IOS Software and IOS XE Software Denial of Service Vulnerability (CNVD-2018-20297)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices.Cluster Management Protocol is one of the cluster management protocols. A denial of service vulnerability exists in Cluster Management Protocol in Cisco IOS Software and IOS XE Software. A...

7.4CVSS7.1AI score0.00856EPSS
SaveExploits0References1
Cisco
Cisco
•added 2018/09/26 4:00 p.m.•69 views

Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation when handling...

7.4CVSS1.7AI score0.00856EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2018/09/26 4:11 a.m.•10 views

atomic-openshift: oc patch with json causes masterapi service crash

An out of bounds write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform 3.x. An attacker can use this flaw to cause a denial of service attack on the Openshift master API service which provides cluster management...

7.7CVSS7.2AI score0.01936EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2018/09/26 12:00 a.m.•2 views

PT-2018-2012

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description The issue is due to improper input validation when handling Cluster Management Protocol CMP messages, which could allow an unauthenticated, adjacent attacker to...

7.4CVSS0.00856EPSS
SaveExploits0References8
NVD
NVD
•added 2018/09/06 2:29 p.m.•55 views

CVE-2018-14632

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

7.7CVSS7.3AI score0.01936EPSS
SaveExploits0References7
Prion
Prion
•added 2018/09/06 2:29 p.m.•24 views

Cross site scripting

An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provides cluster management...

4CVSS7.2AI score0.01936EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder