Lucene search
+L

14000 matches found

CNVD
CNVD
added 2021/04/26 12:00 a.m.8 views

Command Execution Vulnerability in the Firewall Gateway Management System of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/04/26 12:00 a.m.10 views

Command Execution Vulnerability in Netcom Next-Generation Firewall NS-NGFW

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/04/26 12:00 a.m.7 views

Command Execution Vulnerability in the Firewall Gateway Management System of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

7.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/04/23 5:51 a.m.133 views

Hackers Exploit VPN to Deploy SUPERNOVA malware on SolarWinds Orion

The U.S. Cybersecurity and Infrastructure Security Agency CISA has disclosed details of a new advanced persistent threat APT that's leveraging the Supernova backdoor to compromise SolarWinds Orion installations after gaining access to the network through a connection to a Pulse Secure VPN device...

9.8CVSS1.6AI score0.9198EPSS
SaveExploits3
NVD
NVD
added 2021/04/22 8:15 p.m.25 views

CVE-2021-0243

Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service DoS condition. When the firewall policer discard action fails on a Layer 2 port, it wi...

4.7CVSS0.00376EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/22 8:15 p.m.13 views

CVE-2021-0264

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

7.5CVSS5.8AI score0.0098EPSS
SaveExploits0References2
NVD
NVD
added 2021/04/22 8:15 p.m.22 views

CVE-2021-0269

The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious actions against a target device when a user is authenticated to J-Web. An attacker may be able to supersede existing parameters, including hardcoded...

8.8CVSS0.00874EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/22 8:15 p.m.12 views

CVE-2021-0247

A Race Condition Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in the firewall process dfwd of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device. This issue is...

5.5CVSS6.2AI score0.00556EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/22 8:15 p.m.15 views

CVE-2021-0243

Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service DoS condition. When the firewall policer discard action fails on a Layer 2 port, it wi...

4.7CVSS5.8AI score0.00376EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/22 8:15 p.m.33 views

CVE-2021-0247

A Race Condition Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in the firewall process dfwd of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device. This issue is...

6.8CVSS0.00556EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/22 8:15 p.m.39 views

CVE-2021-0225

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...

5.8CVSS0.00708EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/22 8:15 p.m.12 views

CVE-2021-0225

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...

5.8CVSS5.8AI score0.00708EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/22 8:15 p.m.26 views

Design/Logic Flaw

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

5CVSS7.3AI score0.0098EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2021/04/22 8:15 p.m.25 views

Input validation

Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service DoS condition. When the firewall policer discard action fails on a Layer 2 port, it wi...

3.3CVSS4.9AI score0.00376EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/04/22 8:15 p.m.29 views

Race condition

A Race Condition Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in the firewall process dfwd of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device. This issue is...

6.8CVSS5.5AI score0.00556EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/04/22 8:15 p.m.24 views

Hardcoded credentials

The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious actions against a target device when a user is authenticated to J-Web. An attacker may be able to supersede existing parameters, including hardcoded...

5.1CVSS8.3AI score0.00874EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/04/22 8:15 p.m.29 views

Design/Logic Flaw

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...

5CVSS5.8AI score0.00708EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/04/22 7:37 p.m.84 views

CVE-2021-0264

CVE-2021-0264 describes a DoS vulnerability in Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards and PTX10003/PTX10008 devices. When a firewall filter term containing a syslog action is hit (configured on lo0 or a physical interface), the affected line card may crash and restart,...

7.5CVSS6.4AI score0.0098EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/22 7:37 p.m.64 views

CVE-2021-0264 Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

5.9CVSS7.5AI score0.0098EPSS
SaveExploits0References2
CVE
CVE
added 2021/04/22 7:37 p.m.70 views

CVE-2021-0261

CVE-2021-0261 affects Juniper Junos OS J-Web and related HTTP/HTTPS services, allowing an unauthenticated attacker to cause an extended DoS by sending a high volume of specific requests. Affected versions include multiple Junos OS releases across EX and SRX lines (e.g., 12.3 before 12.3R12-S17; 1...

7.5CVSS7.5AI score0.01113EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder