Lucene search
K

16 matches found

Cvelist
Cvelist
added 2026/03/27 10:53 a.m.29 views

CVE-2023-7339 Data collection for dowloading leads into buffer overflow

Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate: through 1.30 mbGate: through 1.30 smartLink HW-DP: through 1.30 smartLink HW-PN: through 1.01...

6.5CVSS0.00359EPSS
Exploits0References2
CVE
CVE
added 2026/01/20 3:23 p.m.13 views

CVE-2025-36397

Summary: CVE-2025-36397 affects IBM Application Gateway 23.10–25.09 and is a vulnerability to HTML injection (basic XSS) that could execute code in a victim’s browser within the hosting site’s security context. What’s affected: IBM Application Gateway 23.10–25.09 (also echoed across Red Hat and C...

5.4CVSS5.5AI score0.00162EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2026/01/06 3:15 p.m.4 views

CVE-2025-46696

Dell Secure Connect Gateway SCG 5.0 Appliance and Application, versions versions 5.26 to 5.30, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

6.7CVSS5.8AI score0.00099EPSS
Exploits0References1
NVD
NVD
added 2026/01/06 3:15 p.m.3 views

CVE-2025-46696

Dell Secure Connect Gateway SCG 5.0 Appliance and Application, versions versions 5.26 to 5.30, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

6.7CVSS0.00099EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2025/10/15 12:0 a.m.5 views

ch.nexsol-tech.gateway:sample-gateway (>=1.2.0 <=1.3.1), ch.nexsol-tech.gateway:spring-cloud-gateway-database (>=1.2.0 <=1.3.1) +37 more potentially affected by CVE-2025-41253 via org.springframework.cloud:spring-cloud-gateway-server (>=4.3.0 <=4.3.1)

org.springframework.cloud:spring-cloud-gateway-server MAVEN version =4.3.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =3.0.0, =1.8.9, =0.12.1, =0.12.1, =0.12.10, =3.10.0, =3.11.0 and more Source cves: CVE-2025-41253 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKCLOUD-13561992...

7.5CVSS7.4AI score0.00435EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/22 6:2 p.m.44 views

Security Bulletin: Security Vulnerabilities in base image packages affect IBM Voice Gateway

Summary Security Vulnerabilities in base image packages affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-39338 DESCRIPTION: Axios is vulnerable to server-side request forgery, caused by a flaw with requests for path relative URLs get processe...

7.5CVSS7.4AI score0.02114EPSS
Exploits1Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.4 views

PT-2023-21416 · Conprosys · Conprosys Iot Gateway +3

Name of the Vulnerable Software and Affected Versions: CONPROSYS M2M Gateway versions 3.7.10 and earlier CONPROSYS M2M Controller Integrated Type versions 3.7.6 and earlier CONPROSYS M2M Controller Configurable Type versions 3.8.8 and earlier Description: A remote authenticated attacker who can...

8.8CVSS8.2AI score0.01929EPSS
Exploits0References9
OSV
OSV
added 2022/08/01 11:15 a.m.4 views

CVE-2022-22326

IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could allow unauthorized viewing of logs and files due to insufficient authorization checks. IBM X-Force ID: 218856...

3.3CVSS5.8AI score0.00193EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2022/06/08 9:52 a.m.372 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

Spring-Cloud-Gateway-CVE-2022-22947 Security Notice regardi...

10CVSS7.9AI score0.98253EPSS
Exploits54
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/08 10:18 p.m.65 views

Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-0287, CVE-2015-0289, CVE-2015-0292, and CVE-2015-0293)

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. IBM DataPower Gateway has addressed the corresponding applicable CVEs. Vulnerability Details CVEID: CVE-2015-0287 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on the system,...

7.5CVSS8.2AI score0.44741EPSS
Exploits1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/07 12:0 a.m.4 views

CVE-2020-5014

IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side requesr forgery attack. IBM X-Force ID: 193247...

6.7CVSS7AI score0.00868EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2020/09/21 3:15 p.m.1 views

CVE-2020-4579

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/2 request with invalid characters. IBM X-Force ID: 184438...

7.5CVSS7.2AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2020/07/07 12:0 a.m.7 views

PT-2020-6444 · Citrix · Citrix Sd-Wan Wanop +2

Name of the Vulnerable Software and Affected Versions: Citrix ADC versions prior to 13.0-58.30 Citrix ADC versions prior to 12.1-57.18 Citrix ADC versions prior to 12.0-63.21 Citrix ADC versions prior to 11.1-64.14 Citrix ADC versions prior to 10.5-70.18 Citrix Gateway versions prior to 13.0-58.3...

4.3CVSS5.5AI score0.26333EPSS
Exploits4References15
Positive Technologies
Positive Technologies
added 2020/07/07 12:0 a.m.6 views

PT-2020-6843 · Citrix · Citrix Sd-Wan Wanop +2

Name of the Vulnerable Software and Affected Versions: Citrix ADC versions prior to 13.0-58.30 Citrix ADC versions prior to 12.1-57.18 Citrix ADC versions prior to 12.0-63.21 Citrix ADC versions prior to 11.1-64.14 Citrix ADC versions prior to 10.5-70.18 Citrix Gateway versions prior to 13.0-58.3...

6.5CVSS6.5AI score0.88411EPSS
Exploits5References20
Check Point Advisories
Check Point Advisories
added 2015/04/05 12:0 a.m.0 views

DarkMagic Flooder Denial of Service Tool

DarkMagic Flooder is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple packets that can potentially cause attacked systems to become temporarily unresponsive. Note: This protection is supported from version R75.40VS and above and cannot be...

5AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2015/04/05 12:0 a.m.1 views

Bull-Dosa Denial of Service Tool

Bull-Dosa is a denial-of-service attack tool associated with malicious activity. The tool crafts and sends multiple packets that can potentially cause attacked systems to become temporarily unresponsive. Note: This protection is supported from version R75.40VS and above and cannot be enforced by...

4.9AI score
Exploits0
Rows per page
Query Builder