Lucene search
+L

1184 matches found

Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.12 views

PT-2023-13937 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

9.8CVSS7.8AI score0.01741EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.10 views

PT-2023-13931 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

9.8CVSS7.7AI score0.01666EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.8 views

PT-2023-13927 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

9.8CVSS7.8AI score0.01733EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.16 views

PT-2023-13943 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version 5.0.1.5-210720-141020 Description: The issue is related to stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary comman...

9.8CVSS7.6AI score0.01837EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.11 views

PT-2023-13951 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

7.2CVSS7.5AI score0.01665EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.10 views

PT-2023-13929 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue concerns stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. These vulnerabilities can be triggered by a specially-crafted netwo...

9.8CVSS7.7AI score0.01666EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.13 views

PT-2023-13924 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary command...

9.8CVSS7.8AI score0.01666EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/01/26 12:00 a.m.11 views

PT-2023-13919 · Siretta · Siretta Quartz-Gold

Name of the Vulnerable Software and Affected Versions: Siretta QUARTZ-GOLD version G5.0.1.5-210720-141020 Description: The issue is related to stack-based buffer overflow vulnerabilities in the DetranCLI command parsing functionality. A specially-crafted network packet can lead to arbitrary comma...

9.8CVSS7.7AI score0.01372EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/25 12:00 a.m.15 views

The vulnerability of the atm_tc_enqueue() function in the network packet scheduling subsystem (net/sched/sch_atm.c) of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the atmtcenqueue function in the network packet scheduling subsystem net/sched/schatm.c of the Linux kernel is related to an incorrect definition of the class type. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.5AI score0.00272EPSS
SaveExploits0References21Affected Software5
CNVD
CNVD
added 2023/01/12 12:00 a.m.33 views

Wireshark has an unspecified vulnerability (CNVD-2023-04533)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. Wireshark versions 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 contain security vulnerabilities that can be exploited by attackers to cause a denial of service via packet injection or by carefully...

6.3CVSS4.9AI score0.00569EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/01/12 12:00 a.m.86 views

ASUS RT-AX82U Denial of Service Vulnerability

The ASUS RT-AX82U is a wireless router from the Chinese company ASUS. A denial of service vulnerability exists in ASUS RT-AX82U version 3.0.0.4.38649674-ge182230, which stems from improper input validation of the cfgserver cmprocessConnDiagPktList opcode of the router configuration service, which...

7.5CVSS7.3AI score0.18847EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/10 9:15 p.m.9 views

CVE-2022-38393

A denial of service vulnerability exists in the cfgserver cmprocessConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this...

7.5CVSS7.3AI score0.18847EPSS
SaveExploits1References2
Prion
Prion
added 2023/01/10 9:15 p.m.35 views

Denial of service

A denial of service vulnerability exists in the cfgserver cmprocessConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this...

5CVSS7.2AI score0.18847EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/10 8:37 p.m.20 views

CVE-2022-38393

A denial of service vulnerability exists in the cfgserver cmprocessConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.38649674-ge182230 router's configuration service. A specially-crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this...

7.5CVSS6.6AI score0.18847EPSS
SaveExploits1References1
Talos
Talos
added 2023/01/10 12:00 a.m.155 views

Asus RT-AX82U cfg_server cm_processConnDiagPktList denial of service vulnerability

Talos Vulnerability Report TALOS-2022-1592 Asus RT-AX82U cfgserver cmprocessConnDiagPktList denial of service vulnerability January 10, 2023 CVE Number CVE-2022-38393 SUMMARY A denial of service vulnerability exists in the cfgserver cmprocessConnDiagPktList opcode of Asus RT-AX82U...

7.5CVSS7.6AI score0.18847EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:00 a.m.14 views

The vulnerability of the CodeMeter license control application, related to reading data outside the buffer in memory, allows a violator to disclose protected information or cause service failure.

The vulnerability of the CodeMeter license control application relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures using a specially created TCP/IP packet...

9.4CVSS7.9AI score0.33304EPSS
SaveExploits1References6Affected Software5
CNNVD
CNNVD
added 2022/12/16 12:00 a.m.8 views

Rockwell Automation MicroLogix 1100和MicroLogix 1400 安全漏洞

The Rockwell Automation MicroLogix 1400 and the Rockwell Automation MicroLogix 1100 are both products of Rockwell Automation, Inc. The Rockwell Automation MicroLogix 1400 and Rockwell Automation MicroLogix 1100 are both products of Rockwell Automation, Inc. The Rockwell Automation MicroLogix 1400...

7.5CVSS7.3AI score0.00678EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2022/12/12 8:14 p.m.47 views

Security Bulletin: IBM QRadar Network Packet Capture has released 7.3.1 Patch 1, and 7.2.8 Patch 1 in response to the vulnerabilities known as Spectre and Meltdown.

Summary IBM has released the following 7.3.1 Patch 1 and 7.2.8. Patch 1 for IBM QRadar Network Packet Capture in response to CVE-2017-5753, CVE-2017-5715, and CVE-2017-5754. Vulnerability Details CVEID: CVE-2017-5753 CVEID: CVE-2017-5715 CVEID: CVE-2017-5754 Affected Products and Versions IBM...

5.6CVSS7AI score0.92621EPSS
SaveExploits14Affected Software1
OSV
OSV
added 2022/11/28 3:15 p.m.11 views

CVE-2022-31877

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet...

8.8CVSS5.8AI score0.00398EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/09 6:42 p.m.64 views

Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities.

Summary The product includes multiple vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2022-29154 DESCRIPTION: Rsync could allow a remote attacker to bypass security...

9.8CVSS8.8AI score0.02647EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder