Lucene search
+L

1968 matches found

Github Security Blog
Github Security Blog
•added 2020/08/20 2:38 p.m.•49 views

Path Traversal in openapi-python-client

Impact Path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk. Giving this a CVSS score of 3.0 Low with CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N/E:P/RL:U/RC:C Patch...

4.1CVSS3AI score0.01137EPSS
SaveExploits0References7Affected Software1
CNVD
CNVD
•added 2020/07/26 12:00 a.m.•10 views

SQL Injection Vulnerability in Off-site Facial Modeling Recognition Annual Inspection System of Shanxi Shangpin Youchuang Technology Co.

Shanxi Shangpin Youchuang Technology Co., Ltd. is a business incubation technology service provider, providing entrepreneurs with a full range of business technology services and more. A SQL injection vulnerability exists in the off-site facial modeling recognition annual inspection system of...

7.7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2020/07/21 3:38 a.m.•435 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Treck Tcp\/Ip

Treck20-Related PoC for CVE-2020-11896 Treck TCP/IP stack and...

10CVSS9.4AI score0.36852EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
•added 2020/07/21 12:00 a.m.•22 views

SD-WAN vEdge DoS

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in state management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.4CVSS6.8AI score0.00526EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/07/21 12:00 a.m.•20 views

SD-WAN vEdge DoS

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in unauthorized access to the indexed source. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

8.6CVSS7.2AI score0.01415EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2020/07/20 12:00 a.m.•20 views

Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Router Denial of Service Vulnerability

Cisco SD-WAN vEdge 5000 Series Routers are Cisco's SD-WAN solution routing devices. A denial-of-service vulnerability in the deep packet inspection DPI engine in Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Router, which stems from the program's failure to properly handle FTP...

8.6CVSS6.8AI score0.01415EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/07/20 12:00 a.m.•17 views

Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Routers Denial of Service Vulnerability

Cisco SD-WAN vEdge 5000 Series Routers are Cisco's SD-WAN solution routing devices. A denial-of-service vulnerability exists in the deep packet inspection DPI engine in Cisco SD-WAN vEdge 5000 Series Routers and SD-WAN vEdge Cloud Routers, which stems from the program's failure to adequately hand...

7.4CVSS6.8AI score0.00526EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/07/16 6:15 p.m.•15 views

CVE-2020-3385

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

6.5CVSS5.8AI score0.00526EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/07/16 6:15 p.m.•14 views

CVE-2020-3369

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this...

7.5CVSS7.2AI score0.01415EPSS
SaveExploits0References1
Prion
Prion
•added 2020/07/16 6:15 p.m.•24 views

Design/Logic Flaw

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An attacker could exploit this...

7.8CVSS7.4AI score0.01415EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/07/16 6:15 p.m.•25 views

Design/Logic Flaw

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

6.1CVSS6.3AI score0.00526EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/07/16 5:22 p.m.•35 views

CVE-2020-3385 Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

7.4CVSS6.4AI score0.00526EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/07/16 5:22 p.m.•12 views

CVE-2020-3385 Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

7.4CVSS7.1AI score0.00526EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/07/15 4:00 p.m.•71 views

Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

A vulnerability in the deep packet inspection DPI engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient handling of malformed packets. An attacker could...

7.4CVSS6.6AI score0.00526EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/07/15 12:00 a.m.•15 views

Fedora: Security Advisory for seamonkey (FEDORA-2020-0fc1639c88)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2020/07/13 1:39 a.m.•23 views

[SECURITY] Fedora 31 Update: seamonkey-2.53.3-1.fc31

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

2AI score
SaveExploits0
Fedora
Fedora
•added 2020/07/12 1:02 a.m.•22 views

[SECURITY] Fedora 32 Update: seamonkey-2.53.3-1.fc32

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

2AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2020/07/07 9:39 a.m.•384 views

Microsoft Launches Free Linux Forensics and Rootkit Malware Detection Service

Microsoft has announced a new free-to-use initiative aimed at uncovering forensic evidence of sabotage on Linux systems, including rootkits and intrusive malware that may otherwise go undetected. The cloud offering, dubbed Project Freta, is a snapshot-based memory forensic mechanism that aims to...

0.3AI score
SaveExploits0
CNVD
CNVD
•added 2020/07/02 12:00 a.m.•24 views

Ntop nDPI Buffer Overflow Vulnerability (CNVD-2020-36700)

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A buffer overflow vulnerability exists in the ndpisearchopenvpn file in lib/protocols/openvpn.c in Ntop nDPI 3.2 and earlier versions. The vulnerability stems from a network system or product performing operations in...

9.1CVSS7.3AI score0.01288EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/07/02 12:00 a.m.•18 views

Ntop nDPI Resource Management Error Vulnerability

Ntop nDPI is an open source library for deep packet inspection from Ntop Italy. A resource management error vulnerability exists in ndpiresetpacketlineinfo in the lib/ndpimain.c file in Ntop nDPI 3.2 and earlier versions. The vulnerability stems from mismanagement of system resources e.g., memory...

9.8CVSS6.8AI score0.01239EPSS
SaveExploits0References1
Rows per page
Query Builder