Lucene search
+L

1968 matches found

osv_cve
osv_cve
•added 2019/01/15 9:29 p.m.•18 views

CVE-2019-0010

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

7.5CVSS5.9AI score0.02739EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/01/15 9:00 p.m.•46 views

CVE-2019-0010 Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

7.5CVSS7.7AI score0.02739EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/15 12:00 a.m.•9 views

CVE-2019-0010: Allocation of Resources Without Limits or Throttling

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

7.5CVSS5.9AI score0.02739EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/01/09 12:00 a.m.•9 views

PT-2019-1145

Name of the Vulnerable Software and Affected Versions: Junos OS on SRX Series versions prior to 12.1X46-D81 Junos OS on SRX Series versions prior to 12.3X48-D77 Junos OS on SRX Series versions prior to 15.1X49-D101 Junos OS on SRX Series versions prior to 15.1X49-D110 Description: The issue is...

7.8CVSS0.02739EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2018/12/25 12:00 a.m.•22 views

Cisco Adaptive Security Appliances SIP Inspection DoS

The vulnerability of the SIP inspection component in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD arises due to errors in processing SIP traffic. Exploiting this vulnerability can allow an attacker to induce...

8.6CVSS7.5AI score0.04381EPSS
SaveExploits0References3Affected Software2
n0where
n0where
•added 2018/11/20 11:32 p.m.•205 views

Nmap Web Dashboard and Reporting: WebMap

Features Import and parse Nmap XML files Statistics and Charts on discovered services, ports, OS, etc… Inspect a single host by clicking on its IP address Attach labels on a host Insert notes for a specific host Create a PDF Report with charts, details, labels and notes Copy to clipboard as Nikto...

6.4AI score
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/11/19 11:33 p.m.•10 views

онлайнинспекция.рф XSS vulnerability

Open Bug Bounty ID: OBB-700156 Description| Value ---|--- Affected Website:| онлайнинспекция.рф Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2018/11/04 12:00 a.m.•55 views

Cisco Multiple Products Denial of Service (CVE-2018-15454)

A Denial of Service DoS vulnerability exists in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD. The vulnerability is due to improper handling of SIP traffic. A successful remote attacker could trigger high CPU usage, resulting in...

7.8CVSS1.3AI score0.04381EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2018/11/01 1:00 p.m.•14 views

CVE-2018-15454 Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

8.6CVSS7.1AI score0.04381EPSS
SaveExploits0References3
NVD
NVD
•added 2018/11/01 12:29 p.m.•36 views

CVE-2018-15454

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

8.6CVSS8.5AI score0.04381EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/01 12:00 a.m.•7 views

CVE-2018-15454: Improper Input Validation

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

8.6CVSS7.7AI score0.04381EPSS
SaveExploits0References8
CERT
CERT
•added 2018/11/01 12:00 a.m.•1089 views

Cisco ASA and FTD SIP Inspection denial-of-service vulnerability

Overview Cisco Adaptive Security Appliance ASA software and Cisco Firepower Threat Defense FTD software fails to properly parse SIP traffic, which can result in a denial-of-service condition on affected devices. Description Cisco Adaptive Security Appliance ASA software and Cisco Firepower Threat...

8.6CVSS8.4AI score0.04381EPSS
SaveExploits0References6
Cisco
Cisco
•added 2018/10/31 7:30 p.m.•719 views

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

8.6CVSS8.4AI score0.04381EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/10/31 12:00 a.m.•16 views

PT-2018-1974 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Session Initiation Protocol SIP inspection engine...

8.6CVSS8.3AI score0.04381EPSS
SaveExploits0References7
VulnCheck KEV
VulnCheck KEV
•added 2018/10/31 12:00 a.m.•10 views

VulnCheck KEV: CVE-2018-15454

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

8.6CVSS7.7AI score0.04381EPSS
SaveIn wildExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/10/31 12:00 a.m.•23 views

FortiOS TLS Decrypt MITM

Vulnerability of the TLS protocol implementation in the FortiOS operating system, caused by defects in the encryption algorithm implementation. Exploiting this vulnerability allows a malicious actor to decrypt messages without knowing the secret key, thereby carrying out a “man-in-the-middle”...

7.5CVSS5.4AI score0.01124EPSS
SaveExploits0References4Affected Software1
Kitploit
Kitploit
•added 2018/10/25 8:48 p.m.•98 views

Httplab - Inspect HTTP Requests And Forge Responses

The interactive web server. HTTPLabs let you inspect HTTP requests and forge responses. Install Golang go get github.com/gchaincl/httplab go install github.com/gchaincl/httplab/cmd/httplab Archlinux yaourt httplab Snap FIXME On systems where snap is supported: snap install httplab Binary...

7.2AI score
SaveExploits0References5
Akamai Blog
Akamai Blog
•added 2018/10/23 3:43 p.m.•92 views

Why traditional security isn't enough

We are constantly being bombarded with questions around the security of our data, but what about security for the devices needed to connect to that data? The world is a changing place and for those inclined to be unsavoury characters, a great place to anonymously make ill-gotten gains from...

7.7AI score
SaveExploits0
NVD
NVD
•added 2018/10/05 2:29 p.m.•33 views

CVE-2018-15390

A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails to releas...

7.1CVSS6.8AI score0.0112EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2018/10/05 2:29 p.m.•18 views

CVE-2018-15390

A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected software fails to releas...

6.8CVSS5.8AI score0.0112EPSS
SaveExploits0References2
Rows per page
Query Builder