Lucene search
+L

3622 matches found

Prion
Prion
added 2021/01/13 10:15 p.m.30 views

Design/Logic Flaw

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit...

5CVSS5.5AI score0.02146EPSS
SaveExploits0References3Affected Software4
OSV
OSV
added 2021/01/13 10:15 p.m.5 views

UBUNTU-CVE-2021-1236

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit...

5.3CVSS6.2AI score0.02146EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/01/13 10:15 p.m.24 views

CVE-2021-1224

Multiple Cisco products are affected by a vulnerability with TCP Fast Open TFO when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP...

5.8CVSS6.1AI score0.02005EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/13 10:15 p.m.28 views

Design/Logic Flaw

Multiple Cisco products are affected by a vulnerability with TCP Fast Open TFO when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP...

5CVSS6AI score0.02005EPSS
SaveExploits0References3Affected Software4
Cvelist
Cvelist
added 2021/01/13 9:17 p.m.30 views

CVE-2021-1236 Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit...

4CVSS6.8AI score0.02146EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2021/01/13 9:17 p.m.4 views

CVE-2021-1236 Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit...

4CVSS5.7AI score0.02146EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2021/01/13 9:17 p.m.23 views

CVE-2021-1236

Removed by vendor...

5.3CVSS5.3AI score0.02146EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/01/13 9:16 p.m.43 views

CVE-2021-1223 Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of an HTTP range header. An attacker could exploit this...

5.8CVSS8.1AI score0.01985EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/01/13 12:00 a.m.3 views

PT-2021-1738 · Cisco +1 · Snort +1

Name of the Vulnerable Software and Affected Versions: Multiple Cisco products affected versions not specified Description: The issue is related to a flaw in the detection algorithm of the Snort application detection engine, which could allow an unauthenticated, remote attacker to bypass the...

8.6CVSS5.6AI score0.02445EPSS
SaveExploits0References43
RedHat Linux
RedHat Linux
added 2021/01/11 10:53 a.m.5 views

Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...

8.8CVSS7.4AI score0.01304EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/01/11 12:00 a.m.6 views

Denial of Service Vulnerability in TP-Link TL-XDR3230 Easy Show Edition

The TL-XDR3230 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-XDR3230 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/01/11 12:00 a.m.7 views

Denial of Service Vulnerability in TP-Link TL-XDR1850 Easy Show Edition

The TL-XDR1850 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-XDR1850 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/01/08 12:00 a.m.15 views

Huawei Mate 30 Buffer Overflow Vulnerability (CNVD-2021-05397)

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 30 suffers from a buffer overflow vulnerability that can be exploited by an attacker by sending a crafted packet with specific parameters to the target device. Due to insufficient validation of the parameters, ...

6.7CVSS7.1AI score0.00212EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/06 12:00 a.m.9 views

Crimson Null Pointer Dereference Vulnerability

Crimson is a programming software from Red Lion. A null pointer dereference vulnerability exists in the protocol converter in Crimson. An attacker could exploit this vulnerability by sending specially crafted packets to cause the device to reboot...

7.8CVSS6.8AI score0.01729EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/05 12:00 a.m.5 views

Denial of Service Vulnerability in Tenda AC23

The Tenda AC23 is a $100 router. A denial of service vulnerability exists in the Tenda AC23. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully constructed packet to a specific destination address...

7AI score
SaveExploits0
CNNVD
CNNVD
added 2020/12/30 12:00 a.m.11 views

Huawei SMC 安全漏洞

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 30 suffers from a buffer overflow vulnerability that can be exploited by an attacker by sending a crafted packet with specific parameters to the target device. Due to insufficient validation of the parameters, ...

6.7CVSS6AI score0.00212EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/17 11:15 p.m.9 views

CVE-2020-12522

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...

9.8CVSS5.9AI score0.02927EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/17 11:15 p.m.25 views

Design/Logic Flaw

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...

10CVSS9.3AI score0.02927EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
added 2020/12/17 10:40 p.m.32 views

CVE-2020-12522 Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...

10CVSS9.4AI score0.02927EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/11 7:15 p.m.6 views

UBUNTU-CVE-2020-26418

Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

5.3CVSS7.1AI score0.02965EPSS
SaveExploits1References6
Rows per page
Query Builder