167 matches found
Schneider Electric ConneXium Network Manager Software安全漏洞
Schneider Electric ConneXium Network Manager Software, an industrial Ethernet network management software from Schneider Electric, France, is vulnerable to a denial of service in Schneider Electric ConneXium Network Manager Software03.23 and earlier versions contain a denial of service...
CVE-2021-30062: Undefined Security Weakness
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer...
CVE-2021-30065: Undefined Security Weakness
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401...
Class Loading Vulnerability in Artemis
Impact This affects all Artemis users who test Java assignments. Ares is not required. Students code that gets automatically tested can run arbitrary code in the container, or arbitrary code on the machine of an assessor in case of manual correction. Patches The problem cannot be resolved easily ...
PT-2022-28163
Name of the Vulnerable Software and Affected Versions Artemis Java Test Sandbox versions prior to 1.8.0 Description The issue allows an attacker to escape the sandbox by including class files in a package that Ares trusts, enabling the execution of arbitrary Java code when a victim runs the...
CVE-2020-1637
A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...
CVE-2020-1637
A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...
CVE-2020-1637
CVE-2020-1637 concerns a bypass of Unified Access Control (UAC) on Juniper Networks SRX Series running Junos OS Enforcer. The root cause is when the Infranet Controller IP range is configured as an IP address range instead of an IP address/netmask, which can allow a user to access network resourc...
PT-2020-4140
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 12.3X48 prior to 12.3X48-D100 Juniper Networks Junos OS on SRX Series versions 15.1X49 prior to 15.1X49-D210 Juniper Networks Junos OS on SRX Series versions 17.3 prior to 17.3R2-S5, 17.3R3-S8...
F5 BIG-IP PEM Input Validation Error Vulnerability
F5 BIG-IP PEM is a policy enforcer used in BIG-IP from F5 USA. An input validation error vulnerability exists in F5 BIG-IP PEM, which can be exploited by an attacker to cause traffic processing interruptions...
Juniper Networks Junos OS Denial of Service Vulnerability while Processing HTTP Traffic
Denial of Service vulnerability in flowd while processing valid HTTP traffic. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2014-3714
Name of the Vulnerable Software and Affected Versions Juniper Junos versions prior to 10.4R16 Juniper Junos versions prior to 11.4R8 Juniper Junos versions prior to 12.1R7 Juniper Junos versions prior to 12.1X44-D20 Juniper Junos versions prior to 12.1X45-D10 Description The issue allows remote...
Juniper Junos SRX Series UAC Enforcer HTTP Remote Code Execution (JSA10574)
According to its self-reported version number, the remote Junos device has a remote code execution vulnerability. Sending a specially crafted HTTP request to an SRX series device can result in arbitrary code execution. A remote, unauthenticated attacker could exploit this to execute arbitrary cod...
CVE-2013-4685
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 8491...
CVE-2013-4685
Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-D15 on SRX devices, when Captive Portal is enabled with the UAC enforcer role, allows remote attackers to execute arbitrary code via crafted HTTP requests, aka PR 8491...
CVE-2013-4685
Juniper Junos OS contains a buffer overflow in flowd when processing HTTP messages (CVE-2013-4685). Affected are SRX devices with Captive Portal and UAC enforcer role across listed revisions: 10.4 before 10.4S14; 11.4 before 11.4R7; 12.1 before 12.1R6; and 12.1X44 before 12.1X44-D15. The vulnerab...
OpenDNSSEC 1.3.0rc2 new Version released !
OpenDNSSEC 1.3.0rc2 new Version released ! Version 1.3.0rc2 of OpenDNSSEC Match the names of the signer pidfile and enforcer pidfile. Include check for resign resalt in ods-kaspcheck. Bugfixes: Bugfix 231: Fix MySQL version check. ods-ksmutil: Update now sends a HUP to the enforcerd. Signer Engin...
CVE-2006-3723
Technical details for CVE-2006-3723 are not publicly available in the provided documents. Monitor for updates; no disclosed affected components, impact, or remediation are provided here.