Lucene search
+L

3526 matches found

Tenable Nessus
Tenable Nessus
added 2020/06/17 12:00 a.m.37 views

EulerOS 2.0 SP2 : ntp (EulerOS-SA-2020-1684)

According to the version of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet wit...

7.5CVSS6.6AI score0.02081EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/06/16 12:00 a.m.41 views

Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2020-1684)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.02081EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2020/06/05 10:24 a.m.42 views

CVE-2020-13817

A high-performance ntpd instance that gets its time from unauthenticated IPv4 time sources may be vulnerable to an off-path attacker who can query time from the victim's ntpd instance. An attacker who can send a large number of packets with the spoofed IPv4 address of the upstream server can use...

7.4CVSS1AI score0.03376EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2020/06/04 1:15 p.m.31 views

CVE-2020-13817

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

7.4CVSS6.6AI score0.03376EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/06/04 12:31 p.m.29 views

CVE-2020-13817

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

5.9CVSS7.3AI score0.03376EPSS
SaveExploits0References7
CVE
CVE
added 2020/06/04 12:31 p.m.571 views

CVE-2020-13817

CVE-2020-13817 affects ntp’s ntpd prior to 4.2.8p14 and 4.3.x prior to 4.3.100. An off‑path attacker can predict transmit timestamps in spoofed UDP packets to remote ntpd, causing a DoS via daemon exit or system time change when the victim relies on unauthenticated IPv4 time sources. Connected so...

7.4CVSS7.2AI score0.03376EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2020/06/04 12:31 p.m.58 views

CVE-2020-13817

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service daemon exit or system time change by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path...

7.4CVSS6.2AI score0.03376EPSS
SaveExploits0
Metasploit
Metasploit
added 2020/06/04 12:00 a.m.256 views

Cayin CMS NTP Server RCE

This module exploits an authenticated RCE in Cayin CMS use exploit/linux/http/cayin/cmsntp msf undefinedcmsntp show actions ...actions... msf undefinedcmsntp set ACTION msf undefinedcmsntp show options ...show and set options... msf undefinedcmsntp run This module requires Metasploit:...

9.9CVSS8.5AI score0.32094EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2020/06/04 12:00 a.m.206 views

Cayin Signage Media Player 3.0 Root Remote Command Injection

!/usr/bin/env python3 Cayin Signage Media Player 3.0 Root Remote Command Injection Vendor: CAYIN Technology Co., Ltd. Product web page: https://www.cayintech.com Affected version: SMP-8000QD v3.0 SMP-8000 v3.0 SMP-6000 v3.0 Build 19025 SMP-6000 v1.0 Build 14246 SMP-6000 v1.0 Build 14199 SMP-6000...

0.6AI score
SaveExploits0
zdt
zdt
added 2020/06/04 12:00 a.m.90 views

Cayin Content Management Server 11.0 - Remote Command Injection (root) Vulnerability

Exploit for multiple platform in category web applications Title: Cayin Content Management Server 11.0 - Remote Command Injection root Author:LiquidWorm Vendor: https://www.cayintech.com CVE: N/A Cayin Content Management Server 11.0 Root Remote Command Injection Vendor: CAYIN Technology Co., Ltd...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/06/04 12:00 a.m.421 views

Cayin Content Management Server 11.0 - Remote Command Injection (root)

Title: Cayin Content Management Server 11.0 - Remote Command Injection root Author:LiquidWorm Date: 2020-06-04 Vendor: https://www.cayintech.com CVE: N/A Cayin Content Management Server 11.0 Root Remote Command Injection Vendor: CAYIN Technology Co., Ltd. Product web page: https://www.cayintech.c...

5.3AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2020/06/04 12:00 a.m.92 views

Cayin Signage Media Player 3.0 Root Remote Command Injection

Summary CAYIN Technology provides Digital Signage solutions, including media players, servers, and software designed for the DOOH Digital Out-of-home networks. We develop industrial-grade digital signage appliances and tailored services so you don't have to do the hard work. Description CAYIN...

8.8CVSS6.1AI score0.01328EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2020/06/03 12:00 a.m.54 views

Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2020-1611)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.2AI score0.03969EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2020/06/02 12:00 a.m.55 views

EulerOS 2.0 SP5 : ntp (EulerOS-SA-2020-1611)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service reject broadcast mode packets via the poll interval in a broadcast...

4.3CVSS6.2AI score0.03969EPSS
SaveExploits2References3
Photon
Photon
added 2020/05/20 12:00 a.m.60 views

Important Photon OS Security Update - PHSA-2020-0093

Updates of 'json-c', 'glibc', 'ntp', 'git', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

6.8CVSS1.7AI score0.03899EPSS
SaveExploits3
Photon
Photon
added 2020/05/20 12:00 a.m.58 views

Important Photon OS Security Update - PHSA-2020-3.0-0093

Updates of 'json-c', 'linux-aws', 'linux', 'git', 'linux-secure', 'linux-esx', 'glibc', 'ntp' packages of Photon OS have been released...

7.8CVSS6.8AI score0.01904EPSS
SaveExploits2
OSV
OSV
added 2020/05/15 3:48 p.m.8 views

MGASA-2020-0212 Updated ntp packages fix security vulnerability

The updated packages fix security vulnerabilities including: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packe...

7.5CVSS7.8AI score0.02081EPSS
SaveExploits0References4
Mageia
Mageia
added 2020/05/15 3:48 p.m.54 views

Updated ntp packages fix security vulnerability

The updated packages fix security vulnerabilities including: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packe...

7.5CVSS2.5AI score0.02081EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/05/13 12:00 a.m.43 views

Photon OS 1.0: Ntp PHSA-2020-1.0-0292

An update of the ntp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0292. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136557;...

7.5CVSS6.4AI score0.02081EPSS
SaveExploits0References2
Photon
Photon
added 2020/05/10 12:00 a.m.42 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0292

An update of 'linux-esx', 'linux', 'mysql', 'ntp', 'docker', 'libtasn1', 'go' packages of Photon OS has been released...

7.8CVSS0.9AI score0.04409EPSS
SaveExploits5
Rows per page
Query Builder