Lucene search
K

1425 matches found

Citrix
Citrix
added 2022/06/03 12:0 a.m.6 views

Users unable to launch - Error: "Cannot complete your request"

'Cannot complete your request' while trying to access the Web Store URL. StoreFront events show that a loopback communication failed...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2022/05/20 11:57 p.m.32 views

CVE-2020-26262

Coturn is free open source implementation of TURN and STUN Server. Coturn before version 4.5.2 by default does not allow peers to connect and relay packets to loopback addresses in the range of 127.x.x.x. However, it was observed that when sending a CONNECT request with the XOR-PEER-ADDRESS value...

7.4CVSS4.3AI score0.00267EPSS
Exploits3References1
OSV
OSV
added 2022/05/14 1:42 a.m.1 views

GHSA-M6G3-XQ5Q-4HG9 Improper Input Validation in Apache Karaf

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service shutdown by sending a shutdown command to all listening high ports...

5.5CVSS5.9AI score0.00081EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 1:42 a.m.20 views

Improper Input Validation in Apache Karaf

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service shutdown by sending a shutdown command to all listening high ports...

5.5CVSS5.3AI score0.00081EPSS
Exploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/15 9:15 p.m.3 views

CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

7.5CVSS5.5AI score0.00389EPSS
Exploits0References2
OSV
OSV
added 2022/03/15 9:15 p.m.2 views

CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

7.5CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/03/15 12:0 a.m.2 views

PT-2022-16392 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security SNS versions 3.7.6 through 3.7.24 Stormshield Network Security SNS versions 3.8.x through 3.11.x before 3.11.13 Stormshield Network Security SNS versions 4.x before 4.2.10 Stormshield Network Security SNS versions...

7.5CVSS7.2AI score0.00389EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.6 views

PT-2025-8437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the scsi: lpfc component. The issue occurs when an external loopback plug is inserted and then removed, followed ...

5.5CVSS6.2AI score0.00012EPSS
Exploits0
0day.today
0day.today
added 2021/10/06 12:0 a.m.1035 views

Dahua Authentication Bypass Vulnerability

STX Subject: Update: Dahua Authentication bypass CVE-2021-33044, CVE-2021-33045 Attack vector: Remote Authentication: Anonymous no credentials needed Researcher: bashis 2021 Limited Disclosure: September 6, 2021 Full Disclosure: October 6, 2021 PoC: https://github.com/mcw0/DahuaConsole -=Dahua=-...

10CVSS0.3AI score0.94269EPSS
Exploits11
RedHat Linux
RedHat Linux
added 2021/09/30 4:59 p.m.4 views

QEMU: net: Infinite loop in loopback mode may lead to stack overflow

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS...

6CVSS6.8AI score0.00006EPSS
Exploits0References5
KoreLogic Security
KoreLogic Security
added 2021/09/01 12:0 a.m.33 views

CyberArk Credential Provider Race Condition And Authorization Bypass

Vulnerability Details Affected Vendor: CyberArk Affected Product: Application Access Manager/Credential Provider Affected Version: Prior to 12.1 Platform: Linux/Windows/zOS CWE Classification: CWE-326: Inadequate Encryption Strength, CWE-362: Concurrent Execution using Shared Resource with...

5.1CVSS0.00085EPSS
Exploits1Affected Software1
OSV
OSV
added 2021/08/26 3:15 p.m.3 views

CVE-2021-32076

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...

5.3CVSS5.8AI score0.00485EPSS
Exploits0References2
Prion
Prion
added 2021/08/26 3:15 p.m.13 views

Design/Logic Flaw

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...

5CVSS5.2AI score0.00485EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/08/26 12:0 a.m.3 views

SolarWinds Web Help Desk 安全漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports features such as centralized knowledge base, IT asset management, project and task management. A security vulnerability exists in SolarWinds Web Help Desk 12.7.2, which can be...

5.3CVSS5.8AI score0.00485EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/08/26 12:0 a.m.2 views

PT-2021-19656 · Solarwinds · Solarwinds Web Help Desk

Name of the Vulnerable Software and Affected Versions: SolarWinds Web Help Desk version 12.7.2 Description: A security issue was discovered, allowing access restriction bypass via referrer spoof. An attacker can access the "Web Help Desk Getting Started Wizard", specifically the admin account...

5.3CVSS5.3AI score0.00485EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2021/08/10 4:14 p.m.1 views

QEMU: net: Infinite loop in loopback mode may lead to stack overflow

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS...

6CVSS6.8AI score0.00006EPSS
Exploits0References5
OSV
OSV
added 2021/06/11 9:15 p.m.30 views

CVE-2021-21382

Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopback address range. This allows you to reach any other service running on localhost which you might consider private. In the configuration that we ship...

9.6CVSS6.6AI score0.00267EPSS
Exploits3References7
NVD
NVD
added 2021/06/11 9:15 p.m.10 views

CVE-2021-21382

Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopback address range. This allows you to reach any other service running on localhost which you might consider private. In the configuration that we ship...

9.6CVSS0.00455EPSS
Exploits1References7
Prion
Prion
added 2021/06/11 9:15 p.m.15 views

Design/Logic Flaw

Restund is an open source NAT traversal server. The restund TURN server can be instructed to open a relay to the loopback address range. This allows you to reach any other service running on localhost which you might consider private. In the configuration that we ship...

5.5CVSS9AI score0.00455EPSS
Exploits4References7Affected Software1
CVE
CVE
added 2021/06/11 8:50 p.m.59 views

CVE-2021-21382

Technical details for CVE-2021-21382 are not provided in the supplied documents. No affected version, exploit, or remediation is stated here. Monitor for updates from official advisories and connected sources.

9.6CVSS9AI score0.00455EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder