Lucene search
+L

2271 matches found

osv_debian
osv_debian
•added 2021/01/14 1:15 a.m.•7 views

DEBIAN-CVE-2020-16119

Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and...

7.8CVSS6.5AI score0.00427EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2021/01/14 12:00 a.m.•20 views

D-Link DSL-2640B UDP Service Privilege Escalation

The vulnerability of the UDP CFM software-based router D-Link DSL-2640B lies in the insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to gain access to administrative credentials remotely...

10CVSS7.7AI score0.01702EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/01/13 12:00 a.m.•58 views

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63298)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows/Windows Server NT Lan Manager Datagra...

5.5CVSS1.2AI score0.01321EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/12 8:15 p.m.•30 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/01/12 8:15 p.m.•9 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/01/12 8:15 p.m.•12 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.3AI score0.01321EPSS
SaveExploits0References3Affected Software26
Cvelist
Cvelist
•added 2021/01/12 7:42 p.m.•41 views

CVE-2021-1676 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

5.5CVSS7.1AI score0.01321EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/12 7:42 p.m.•138 views

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2Affected Software8
Microsoft CVE
Microsoft CVE
•added 2021/01/12 8:00 a.m.•61 views

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

5.5CVSS5.7AI score0.01321EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/12 12:00 a.m.•4 views

CVE-2021-1676: Undefined Security Weakness

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS7.4AI score0.01321EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2021/01/12 12:00 a.m.•189 views

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

9.8CVSS7.2AI score0.10031EPSS
SaveExploits3References56
CNNVD
CNNVD
•added 2021/01/12 12:00 a.m.•26 views

Microsoft NT LAN Manager information disclosure vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows/Windows Server NT Lan Manager Datagra...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/09 12:00 a.m.•27 views

PT-2021-7683 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A remote denial of service issue was found in the Linux kernel's TIPC kernel module. The tipc link xmit function hits an unknown state while attempting to parse SKBs that are not in th...

9.8CVSS6.4AI score0.93838EPSS
SaveExploits110References698
NCSC
NCSC
•added 2021/01/05 12:00 a.m.•60 views

Fixed an issue in Citrix ADC and Citrix Gateway

Citrix has fixed an issue in ADC and Gateway which can lead to denial-of-service attacks. A malicious party could potentially potentially misuse DTLS to cause a Denial-of-Service. Abuse can only occur when DTLS is enabled. Citrix reports that limited scale attacks are currently being reported whi...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/31 12:00 a.m.•24 views

MatrixSSL Invalid Pointer Release Vulnerability

MatrixSSL is an embedded, open source SSLv3 stack designed for small applications and devices. An invalid pointer release vulnerability exists in the DTLS server in versions prior to MatrixSSL 4.2.2 Open. An attacker could exploit this vulnerability via specially crafted incoming network messages...

7.5CVSS6.9AI score0.01795EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2020/12/30 12:00 a.m.•25 views

Inside Secure MatrixSSL buffer error vulnerability

MatrixSSL is an embedded, open source SSLv3 stack designed for small applications and devices. An invalid pointer release vulnerability exists in the DTLS server in versions prior to MatrixSSL 4.2.2 Open. An attacker could exploit this vulnerability via specially crafted incoming network messages...

7.5CVSS5.8AI score0.01795EPSS
SaveExploits1References3
The Hacker News
The Hacker News
•added 2020/12/25 6:22 a.m.•95 views

Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller ADC devices that attackers are abusing to launch amplified distributed denial-of-service DDoS attacks against several targets. "An attacker or bots can overwhe...

0.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2020/12/25 6:22 a.m.•14 views

Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller ADC devices that attackers are abusing to launch amplified distributed denial-of-service DDoS attacks against several targets. "An attacker or bots can overwhe...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/12/15 9:57 a.m.•33 views

CVE-2020-35471

A NULL pointer dereference vulnerability was found in Envoy. During the handling of truncated or dropped UDP datagrams, this flaw allows an attacker to specify the length of the packet to be larger than 1500 bytes and cause the envoy proxy process to segfault, resulting in a denial of service. Th...

7.5CVSS7.2AI score0.02393EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/12/15 12:48 a.m.•40 views

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

7.6AI score0.02393EPSS
SaveExploits1References3
Rows per page
Query Builder