Lucene search
+L

41 matches found

OpenVAS
OpenVAS
•added 2023/12/21 12:00 a.m.•36 views

Resource Management Error Vulnerability in Huawei CloudEngine 1800V Product (huawei-sa-20201202-01-cloudengine)

CloudEngine 1800V product has a resource management error vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.7AI score0.00745EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•8 views

CVE-2022-47547: Improper Preservation of Permissions

GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score and thus not be pruned from the network even though it continuously misbehaves by never forwarding topic messages...

5.3CVSS5.8AI score0.00555EPSS
SaveExploits1References3
Redos
Redos
•added 2021/12/24 12:00 a.m.•25 views

ROS-2-1294

2.1294 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS8.1AI score0.61664EPSS
SaveExploits6
Redos
Redos
•added 2021/12/24 12:00 a.m.•44 views

ROS-2-905

2.905 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS8.1AI score0.61664EPSS
SaveExploits6
Redos
Redos
•added 2021/09/08 12:00 a.m.•22 views

ROS-2-1755

2.1755 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS8AI score0.99962EPSS
SaveExploits89
Redos
Redos
•added 2021/09/08 12:00 a.m.•43 views

ROS-2-477

2.477 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS8.2AI score0.61664EPSS
SaveExploits9
Redos
Redos
•added 2021/09/08 12:00 a.m.•40 views

ROS-2-551

2.551 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS7.9AI score0.61664EPSS
SaveExploits7
Redos
Redos
•added 2021/09/08 12:00 a.m.•35 views

ROS-2-927

2.927 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

9.8CVSS8.1AI score0.61664EPSS
SaveExploits6
CNNVD
CNNVD
•added 2021/07/05 12:00 a.m.•9 views

ptp4l buffer error vulnerability

ptp4l is an implementation of IEEE Standard 1588 for Linux for the Precision Time Protocol PTP. A buffer error vulnerability exists in ptp4l, which stems from a lack of length checking when forwarding PTP messages between ports, and can lead to information leakage, crashes, or potentially remote...

8.8CVSS8.6AI score0.02955EPSS
SaveExploits0References22
osv_ghsa
osv_ghsa
•added 2021/05/10 3:17 p.m.•76 views

GHSA-2W7W-2J92-44HX HTTP Request Smuggling in akka-http-core

A vulnerable Akka HTTP server will accept a malformed message and hand it over to the user. If the user application proxies this message to another server unchanged and that server also accepts that message but interprets it as two HTTP messages, the second message has reached the second server...

6.5CVSS6.3AI score0.00711EPSS
SaveExploits0References5
Schneier on Security
Schneier on Security
•added 2021/03/19 11:21 a.m.•43 views

Easy SMS Hijacking

Vice is reporting on a cell phone vulnerability caused by commercial SMS services. One of the things these services permit is text message forwarding. It turns out that with a little bit of anonymous money -- in this case, $16 off an anonymous prepaid credit card -- and a few lies, you can forwar...

2.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/28 12:00 a.m.•61 views

Huawei CloudEngine 1800V Denial of Service Vulnerability

Huawei CloudEngine 1800V is an 1800V series data center switch from Huawei of China. Huawei CloudEngine 1800V denial of service vulnerability can be exploited by remote attackers to submit special requests that can prevent messages received by the system from being forwarded properly for denial o...

7.5CVSS4.1AI score0.00745EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/24 4:15 p.m.•15 views

CVE-2020-9120

CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages to the device, resulting in the message received by the system can't be forwarded normally...

7.5CVSS7.1AI score0.00745EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/24 4:15 p.m.•33 views

CVE-2020-9120

CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages to the device, resulting in the message received by the system can't be forwarded normally...

7.5CVSS7.5AI score0.00745EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/24 4:15 p.m.•20 views

Design/Logic Flaw

CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages to the device, resulting in the message received by the system can't be forwarded normally...

5CVSS7.4AI score0.00745EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/24 12:00 a.m.•7 views

CVE-2020-9120: Undefined Security Weakness

CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages to the device, resulting in the message received by the system can't be forwarded normally...

7.5CVSS5.7AI score0.00745EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2020/12/24 12:00 a.m.•20 views

Huawei CloudEngine 1800V security vulnerability

Huawei CloudEngine 1800V is an 1800V series data center switch from Huawei of China. Huawei CloudEngine 1800V denial of service vulnerability can be exploited by remote attackers to submit special requests that can prevent messages received by the system from being forwarded properly for denial o...

7.5CVSS7.1AI score0.00745EPSS
SaveExploits0References2
CVE
CVE
•added 2020/10/06 5:35 p.m.•87 views

CVE-2020-1902

CVE-2020-1902 : According to connected sources, the issue affects WhatsApp for Android and WhatsApp Business for Android, where a quick search on a highly forwarded message could have been sent to Google services over plain HTTP in versions around v2.20.108–v2.20.140 (WhatsApp) and v2.20.35–v2.20...

7.5CVSS7.5AI score0.00666EPSS
SaveExploits0References1Affected Software2
ThreatPost
ThreatPost
•added 2020/04/08 1:24 p.m.•83 views

WhatsApp Axes COVID-19 Mass Message Forwarding

In an effort to stem what it says is misinformation being spread on its platform, WhatsApp is limiting the number of recipients to which its users can forward certain messages about the COVID-19 pandemic. Now, users of the Facebook-owned messaging app can only forward messages with double arrows ...

6.9AI score
SaveExploits0References9
osv_cve
osv_cve
•added 2014/07/19 7:55 p.m.•16 views

CVE-2014-3533

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service disconnect via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor...

4AI score0.00417EPSS
SaveExploits0References11
Rows per page
Query Builder