lsa-conso.fr XSS vulnerability

Open Bug Bounty ID: OBB-452269 Description| Value ---|--- Affected Website:| lsa-conso.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

CVE-2017-4920

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement LSA. A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop ...

MaxAge LSA Vulnerability in OSPF Protocol of Multiple Huawei Products Products

Huawei AC6005 and others are products of Huawei, China.Huawei AC6005 is an access control device.CloudEngine 12800 is a data center switch device. A MaxAge LSA vulnerability exists in the OSPF protocol of multiple Huawei products. When the device receives a specific LSA message, the LS Link Statu...

CVE-2017-8147

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00,...

CVE-2017-8147

AC6005 V200R006C10SPC200,AC6605 V200R006C10SPC200,AR1200 with software V200R005C10CP0582T, V200R005C10HP0581T, V200R005C20SPC026T,AR200 with software V200R005C20SPC026T,AR3200 V200R005C20SPC026T,CloudEngine 12800 with software V100R003C00, V100R005C00, V100R005C10, V100R006C00,...

CVE-2017-8147

CVE-2017-8147 corresponds to a MaxAge LSA vulnerability in OSPF on Huawei products (e.g., AC6005/AC6605/CloudEngine series, S-series, USG/SECOSPACE lines, etc.). The issue arises from improper OSPF handling, where receiving specific LSA packets causes the Link State Age to be set to MaxAge (3600 ...

lsa-conso.fr XSS vulnerability

Open Bug Bounty ID: OBB-429073 Description| Value ---|--- Affected Website:| lsa-conso.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

VMSA-2017-0014:VMware NSX-V Edge updates address OSPF Protocol LSA DoS

VMSA-2017-0014 VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0014 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware...

Design/Logic Flaw

Cisco IOS 12.0 through 15.6, Adaptive Security Appliance ASA Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 through 3.18 are affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability...

CVE-2017-6770

CVE-2017-6770 affects Cisco IOS, ASA, NX-OS, and IOS XE platforms (OSPF LSA database). The issue enables an unauthenticated, remote attacker to seize control of the OSPF AS routing table by injecting crafted OSPF LSA type 1 packets, potentially intercepting or black-holing traffic. The vulnerabil...

CVE-2017-1460

IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity. IBM X-Force ID: 128379...

CVE-2017-1460

IBM i OSPF on versions 6.1, 7.1, 7.2, and 7.3 is affected by CVE-2017-1460 due to a rogue router spoofing origin, which leaves the LSA database incomplete and may cause loss of connectivity. IBM provides fixes via PTFs SI64413 (6.1), SI64412 (7.1), SI64411 (7.2), and SI64350 (7.3); affected relea...

Cisco IOS Software OSPF LSA Manipulation Vulnerability (cisco-sa-20170727-ospf)

Cisco IOS Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

Multiple Cisco Products OSPF LSA Manipulation Vulnerability

Multiple Cisco products are affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could allow an unauthenticated, remote attacker to take full control of the OSPF Autonomous System AS domain routing table...

Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency

Overview Open Shortest Path First OSPF protocol implementations may improperly determine Link State Advertisement LSA recency for LSAs with MaxSequenceNumber. Attackers with the ability to transmit messages from a routing domain router may send specially crafted OSPF messages to poison routing...

OSPF Protocol MaxAge LSA Denial of Service Vulnerability in Multiple Huawei Products

AC6005 is a wireless access controller AC AccessController from Huawei Technologies Co. the AR1200 and AR3200 are router products. the AR207 is the base model in Huawei's AR200 series of enterprise routers. A denial of service vulnerability exists in the MaxAge LSA in the OSPF protocol of multipl...

Moderate: Red Hat Security Advisory: quagga security and bug fix update

An update for quagga is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2016-6421

Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service process restart via a crafted OSPF Link State Advertisement LSA update, aka Bug ID CSCvb05643...

lsa-conso.fr XSS vulnerability

Vulnerable URL: http://www.lsa-conso.fr/recherche=%22%3E%3C/script%3E%3Cscript+src=https://openbugbounty.org/1.js%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

BadLock vulnerability of technology to track and risk protection-vulnerability warning-the black bar safety net

Nsfocus continued focus on domestic security trends, as early as 3 months when first released BadLock threat warning notices. 4 on 1 on 2, Microsoft patch day schedule. At this time Microsoft released the patch, contains a BadLock vulnerability that can be on a windows System and the Samba servic...