1088 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-37032
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgpcapabilitymsgparse...
Linux Distros Unpatched Vulnerability : CVE-2024-38626
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fuse: clear FRSENT when re-adding requests into pending list The following warning was...
Malicious code in @zalastax/nolb-fr (npm)
The package @zalastax/nolb-fr was found to contain malicious code...
MAL-2025-11489 Malicious code in @zalastax/nolb-fr (npm)
The package @zalastax/nolb-fr was found to contain malicious code...
CERTFR-2025-ACT-030
creationtimestamp| type| source ---|---|--- 2025-07-21 15:08:30+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3luibgnek2y2r 2025-07-21 15:08:31+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114891850304807565 2025-07-21 15:25:54+00:00| seen|...
CVE-2019-10972
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file .frc2. Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application i...
CVE-2019-10976
Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file .frc2. Once a user opens the file, the attacker could read arbitrary files...
brax47.fr Cross Site Scripting vulnerability OBB-4041966
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2025-21985
creationtimestamp| type| source ---|---|--- 2025-04-01 19:44:32+00:00| seen| https://t.me/cvedetector/21787 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
SUSE CVE-2024-55553
In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...
DEBIAN-CVE-2024-55553
In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...
Raccourci Webmarketing 1.1.42 SQL Injection
==================================================================================================================================== | Title : Raccourci Webmarketing V1.1.42 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...
bgpattrencap Heap Buffer Overflow DoS
The vulnerability of the bgpattrencap function in the bgpd/bgpattr.c file of the networking routing implementation software for Unix-like systems in FRRouting is related to the lack of checking the actual remaining flow length before assigning a value to the TLV. Exploiting this vulnerability cou...
An issue was discovered in FRRouting (FRR) through 10.1. bgp_attr_encap in bgpd/bgp_attr.c does not check the actual remaining stream length before taking the TLV value.
...
ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet because of an attempted access to a missing attribute field.
...
AZL-47868 CVE-2024-44070 affecting package frr for versions less than 9.1.1-2
An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual remaining stream length before taking the TLV value...
DEBIAN-CVE-2024-44070
An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual remaining stream length before taking the TLV value...
Lawyer CMS 1.6 Insecure Settings
==================================================================================================================================== | Title : Lawyer CMS 1.6 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits | |...
SchoolPlus LMS 1.0 SQL Injection
============================================================================================================================================= | Title : SchoolPlus LMS v1.0 SQL injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bi...
mairie-aigremont-78.fr Cross Site Scripting vulnerability OBB-3945745
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...