Lucene search
+L

343 matches found

OSV
OSV
•added 2016/02/10 11:59 a.m.•15 views

CVE-2016-0050

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

5.3CVSS5.8AI score0.17879EPSS
SaveExploits0References2
Prion
Prion
•added 2016/02/10 11:59 a.m.•32 views

Authentication flaw

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

5CVSS7.1AI score0.17879EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2016/02/10 11:00 a.m.•42 views

CVE-2016-0050

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

5.6AI score0.17879EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/02/10 12:00 a.m.•12 views

CVE-2016-0050: Improper Input Validation

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

5.3CVSS6.5AI score0.17879EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/02/10 12:00 a.m.•3 views

PT-2016-1227

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2 Description The issue is related to the Network Policy Server NPS component in Microsoft Windows Server,...

5.3CVSS0.17879EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2016/02/10 12:00 a.m.•47 views

Microsoft Windows NPS RADIUS Server Denial of Service Vulnerability (3133043)

This host is missing an important security update according to Microsoft Bulletin MS16-021 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5.3CVSS6AI score0.17879EPSS
SaveExploits0References2
Symantec
Symantec
•added 2016/02/09 12:00 a.m.•59 views

Microsoft Network Policy Server RADIUS Implementation CVE-2016-0050 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause a denial of service condition. Technologies Affected Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft...

5CVSS0.8AI score0.17879EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2016/02/09 12:00 a.m.•46 views

MS16-021: Security Update for NPS RADIUS Server to Address Denial of Service (3133043)

The remote Windows host is affected by a denial of service vulnerability in the Network Policy Server NPS due to improper handling of RADIUS authentication requests. An unauthenticated, remote attacker can exploit this, via specially crafted username strings, to cause a denial of service conditio...

5.3CVSS6.4AI score0.17879EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/11/19 12:00 a.m.•54 views

D-Link DIR-816L Cross-Site Request Forgery Vulnerability

D-Link DIR-816L is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in D-Link DIR-816L Wireless routers using firmware versions prior to 2.06.B09BETA. A remote attacker can exploit this vulnerability by sending specially crafted requests to the hedwig.c...

6.8CVSS7.1AI score0.03214EPSS
SaveExploits6References1
NVD
NVD
•added 2015/11/18 4:59 p.m.•35 views

CVE-2015-5999

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

6.8CVSS7.6AI score0.03214EPSS
SaveExploits6References6
Prion
Prion
•added 2015/11/18 4:59 p.m.•29 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09BETA allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 change the network policy, or 3 possibly have...

6.8CVSS8.1AI score0.03214EPSS
SaveExploits6References6Affected Software1
securityvulns
securityvulns
•added 2015/01/19 12:00 a.m.•57 views

Microsoft Network Policy Server DoS

Crash on username processing in RADIUS request...

7.8CVSS1.5AI score0.78735EPSS
SaveExploits1
CNVD
CNVD
•added 2015/01/15 12:00 a.m.•18 views

Microsoft Windows Network Policy Server Remote Denial of Service Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. A denial of service vulnerability exists in Microsoft Network Policy Server that allows an unauthenticated attacker to send specially crafted username characters to the IAS or Network Policy Server NPS, which can cause RADIUS...

7.8CVSS7AI score0.78735EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2015/01/14 12:00 a.m.•37 views

Microsoft Windows Network Policy Server Denial-of-Service Vulnerability (3014029)

This host is missing an important security update according to Microsoft Bulletin MS15-007. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.8CVSS7.2AI score0.78735EPSS
SaveExploits1References3
Symantec
Symantec
•added 2015/01/13 12:00 a.m.•34 views

Microsoft Windows Network Policy Server CVE-2015-0015 Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected system to become unresponsive, resulting in a denial-of-service condition. Technologies Affected Avaya Aura Conferencing Standard Edition 6.0 Avaya CallPilo...

7.8CVSS0.1AI score0.78735EPSS
SaveExploits1Affected Software10
Microsoft KB
Microsoft KB
•added 2015/01/13 12:00 a.m.•35 views

MS15-007: Vulnerability in Network Policy Server RADIUS implementation could cause denial of service: January 13, 2015

None None...

5.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2015/01/13 12:00 a.m.•2 views

PT-2015-4395

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions 2003 SP2, 2008 SP2 and R2 SP1, and 2012 Gold and R2 Description This issue allows remote attackers to cause a denial of service condition, resulting in a system hang and RADIUS outage, by sending crafted...

7.8CVSS0.78735EPSS
SaveExploits1References7
Check Point Advisories
Check Point Advisories
•added 2015/01/13 12:00 a.m.•19 views

Microsoft Network Policy Server RADIUS Denial of Service (MS15-007; CVE-2015-0015)

A denial of service vulnerability exists in the Network Policy Server NPS. The vulnerability is due to the way the NPS handles username strings. A remote attacker can exploit this issue by sending a specially crafted username string to the NPS...

7.8CVSS6.1AI score0.78735EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/13 12:00 a.m.•8 views

CVE-2015-0015: Undefined Security Weakness

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

7.8CVSS7.3AI score0.78735EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2015/01/13 12:00 a.m.•79 views

MS15-007: Vulnerability in Network Policy Server RADIUS Implementation Could Cause Denial of Service (3014029)

The remote Windows host is affected by a denial of service vulnerability due to a failure to properly parse username queries on an Internet Authentication Service IAS or a Network Policy Server NPS. A remote, unauthenticated attacker, using specially crafted username strings, can exploit this to...

7.8CVSS5.5AI score0.78735EPSS
SaveExploits1References2
Rows per page
Query Builder