Lucene search
K

402 matches found

NVD
NVD
added 2025/11/12 10:15 p.m.1 views

CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

0.00058EPSS
Exploits1References7
OSV
OSV
added 2025/11/12 5:15 p.m.0 views

CVE-2025-52331

Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes archived file names without validation i...

6.1CVSS5.7AI score0.00024EPSS
Exploits0References3
NVD
NVD
added 2025/11/06 6:15 p.m.3 views

CVE-2025-27916

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID...

7.5CVSS0.00056EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/06 12:0 a.m.5 views

CVE-2025-27916

An issue was discovered in AnyDesk for Windows before 9.0.6 and AnyDesk for Android before 8.0.0. When the connection between two clients is established via an IP address, it is possible to manipulate the data and spoof the AnyDesk ID...

0.00056EPSS
Exploits1References2
NCSC
NCSC
added 2025/10/31 9:34 a.m.2 views

Vulnerabilities fixed in Rockwell Automation COMMS

Rockwell Automation has fixed vulnerabilities in COMMS NATR systems. The vulnerabilities include multiple broken authentication issues that pose serious risks, including denial-of-service attacks, possible takeovers of admin accounts and improper changes to NAT rules. In addition, there is a Stor...

9.9CVSS6.2AI score0.0005EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/10/23 4:18 a.m.9 views

CVE-2025-62820

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

4.9CVSS7.1AI score0.00045EPSS
Exploits0References2
CNVD
CNVD
added 2025/10/17 12:0 a.m.4 views

Unspecified Vulnerability in Rockwell Automation Comms-1783-NATR

Rockwell Automation Comms-1783-NATR is an industrial Ethernet address translation device from Rockwell Automation. A security vulnerability exists in the Rockwell Automation Comms-1783-NATR that stems from a lack of authentication checks for critical functions and can be exploited by an attacker ...

9.9CVSS7.2AI score0.0005EPSS
Exploits0References1
CNVD
CNVD
added 2025/10/17 12:0 a.m.2 views

F5 BIG-IP ePVA Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the ePVA module of BIG-IP. The vulnerability arises due to undisclosed traffic tha...

8.7CVSS6.8AI score0.00036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/16 2:51 p.m.2 views

CVE-2025-53856

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS6.8AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/15 3:30 p.m.2 views

EUVD-2025-34637

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS6.3AI score0.00036EPSS
Exploits0References2
OSV
OSV
added 2025/10/15 2:15 p.m.0 views

CVE-2025-53856

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/10/15 2:15 p.m.2 views

CVE-2025-53856

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS0.00036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/15 1:55 p.m.2 views

CVE-2025-53856 TMM vulnerability

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS6.4AI score0.00036EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/15 1:55 p.m.3 views

CVE-2025-53856 TMM vulnerability

When a virtual server, network address translation NAT object, or secure network address translation SNAT object uses the embedded Packet Velocity Acceleration ePVA feature, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. To determine which BIG-IP platforms have...

8.7CVSS0.00036EPSS
Exploits0References1
CVE
CVE
added 2025/10/15 1:55 p.m.12 views

CVE-2025-53856

CVE-2025-53856 (TMM ePVA DoS) : The vulnerability affects BIG-IP when the embedded ePVA feature is used by a NAT/SNAT/virtual server and the Auto Last Hop setting is disabled, allowing undisclosed traffic to terminate the Traffic Management Microkernel (TMM) and cause DoS. A remote, unauthenticat...

8.7CVSS6.4AI score0.00036EPSS
Exploits0References1Affected Software21
NVD
NVD
added 2025/10/14 1:15 p.m.2 views

CVE-2025-7328

Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...

9.9CVSS0.0005EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.1 views

Rockwell Automation Comms-1783-NATR 安全漏洞

Rockwell Automation Comms-1783-NATR is an industrial Ethernet address translation device from Rockwell Automation. A security vulnerability exists in the Rockwell Automation Comms-1783-NATR that stems from a lack of authentication checks for critical functions and can be exploited by an attacker ...

9.9CVSS6.8AI score0.0005EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.3 views

Tenda AC7 命令注入漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44, which originates from the failure to properly filter the parameter lanIp in the file /goform/AdvSetLanip to construct command special characters, commands, etc...

8.8CVSS7.9AI score0.00993EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-10116

Malware in sbrugna...

5.3CVSS5.4AI score0.00628EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-0842

Malware in sbrugna...

7.5CVSS6.9AI score0.0049EPSS
Exploits0References4
Rows per page
Query Builder