Lucene search
+L

673 matches found

The Hacker News
The Hacker News
added 2022/06/16 11:00 a.m.28 views

Difference Between Agent-Based and Network-Based Internal Vulnerability Scanning

For years, the two most popular methods for internal scanning: agent-based and network-based were considered to be about equal in value, each bringing its own strengths to bear. However, with remote working now the norm in most if not all workplaces, it feels a lot more like agent-based scanning ...

6.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/05/18 12:00 a.m.37 views

Juniper Junos OS Evolved DoS (JSA69516)

An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able to connect to a specific open IPv4 port, which in affected releases should otherwise be unreachable, to cause the CPU to consume all resources as more traffic ...

7.8CVSS7.3AI score0.01033EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/13 3:15 p.m.33 views

CVE-2021-22275

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service...

8.6CVSS0.00924EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/11 5:15 p.m.35 views

Code injection

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committ...

9CVSS7.2AI score0.01547EPSS
SaveExploits0References1Affected Software1
Palo Alto Networks
Palo Alto Networks
added 2022/05/11 4:00 p.m.74 views

PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committ...

9CVSS2.8AI score0.01547EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/05/11 12:00 a.m.43 views

Palo Alto Networks PAN-OS 8.1.x < 8.1.23 / 9.0.x < 9.0.16 / 9.1.x < 9.1.13 / 10.0.x < 10.0.10 / 10.1.x < 10.1.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.23 or 9.0.x prior to 9.0.16 or 9.1.x prior to 9.1.13 or 10.0.x prior to 10.0.10 or 10.1.x prior to 10.1.5. It is, therefore, affected by a vulnerability. - A vulnerability exists in Palo Alto Networks PAN-OS...

9CVSS7.6AI score0.01547EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/04/25 12:00 a.m.30 views

Juniper Junos OS Evolved DoS (JSA69505)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69505 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allow...

7.5CVSS7.4AI score0.01004EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/20 4:15 p.m.32 views

CVE-2021-43990

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...

6.1CVSS0.00692EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/20 4:15 p.m.31 views

CVE-2021-43988

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights...

6.1CVSS0.00874EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/20 4:15 p.m.8 views

CVE-2021-43933

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources...

5.9CVSS6.2AI score0.00691EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/20 4:15 p.m.32 views

CVE-2021-43933

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources...

6.1CVSS0.00691EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/20 4:15 p.m.23 views

Design/Logic Flaw

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources...

4.3CVSS6.1AI score0.00691EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/04/20 4:15 p.m.27 views

Design/Logic Flaw

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights...

4.3CVSS6.3AI score0.00874EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/20 3:30 p.m.42 views

CVE-2021-43988 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights...

6.1CVSS6.6AI score0.00874EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/20 3:30 p.m.108 views

CVE-2021-43988

CVE-2021-43988 affects FANUC ROBOGUIDE (simulation platform). The vulnerability is a path traversal issue (improper restriction of pathnames) in ROBOGUIDE versions

6.1CVSS6.3AI score0.00874EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/20 3:30 p.m.33 views

CVE-2021-43933 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources...

6.1CVSS6.4AI score0.00691EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/20 3:30 p.m.88 views

CVE-2021-43933

The CVE-2021-43933 entry maps to FANUC ROBOGUIDE Simulation Platform. Affected is ROBOGUIDE versions v9.40083.00.05 (Rev T) and earlier. The issue is Uncontrolled Resource Consumption (CWE-400) leading to a DoS via network-based requests that exhaust heap memory resources. ICSA-22-109-03 notes re...

6.1CVSS6.2AI score0.00691EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/20 3:30 p.m.85 views

CVE-2021-43990

The CVE-2021-43990 entry concerns FANUC ROBOGUIDE, a robot simulation software. Affected product: ROBOGUIDE versions including v9.40083.00.05 and earlier. Vulnerability type: XML External Entity Reference (XXE) in XML payload handling, allowing a crafted malicious XML to trigger an external entit...

6.1CVSS5.8AI score0.00692EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/20 3:30 p.m.39 views

CVE-2021-43990 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call...

6.1CVSS6.5AI score0.00692EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/04/20 12:00 a.m.11 views

PT-2022-11968 · Fanuc · Roboguide

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a network-based attack where threat actors supply a crafted, malicious XML payload. This payload is designed to trigger an external...

6.1CVSS5.4AI score0.00692EPSS
SaveExploits0References4
Rows per page
Query Builder