Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update

An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Aruba Networks ArubaOS和InstantOS 安全漏洞

Aruba Networks ArubaOS and Aruba Networks InstantOS are both products of Aruba Networks, Inc. Aruba Networks InstantOS is an Arch Linux-based distribution. ArubaOS and InstantOS contain a security vulnerability that arises from a buffer overflow vulnerability in multiple underlying services that...

F5 Networks BIG-IP : Java vulnerabilities (K000135555)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K000135555 advisory. CVE-2020-2756Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serializatio...

Juniper Junos OS Vulnerability (JSA11128)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11128 advisory. - A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service DoS by sending a high rate of specific packe...

Juniper Junos OS Vulnerability (JSA11134)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11134 advisory. - In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit AFT manager process Evo-aftmand,...

Juniper Junos OS Vulnerability (JSA69878)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69878 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS Evolved on ACX7000 Series allows an...

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a perpetrator to cause service failures...

Juniper Junos OS Vulnerability (JSA10865)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10865 advisory. - Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very...

Juniper Junos OS Vulnerability (JSA69508)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69508 advisory. - An Improper Update of Reference Count vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to trigger a count...

Juniper Junos OS Vulnerability (JSA10887)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA10887 advisory. - An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system...

Rockwell Automation Kinetix 5700 DC Bus Power Supply

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Kinetix 5700 Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service attack...

GeoVision GV-ADR2701

1. EXECUTIVE SUMMARY ​CVSS v3 9.8 ​ATTENTION: Exploitable remotely/low attack complexity/public exploits are available ​Vendor: GeoVision ​Equipment: GV-ADR2701 ​Vulnerabilities: Improper Authentication 2. RISK EVALUATION ​Successful exploitation of this vulnerability could allow an attacker to...

F5 Networks BIG-IP : SSL 3.0/TLS 1.0 vulnerability (K13400)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K13400 advisory. - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozil...

CVE-2023-35802

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit...

CVE-2023-35802

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit...

Extreme Networks IQ Engine 安全漏洞

Extreme Networks IQ Engine is an engine from Extreme Networks, Inc. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1, which stems from a buffer overflow vulnerability in the execution of the CAPWAP protocol. The vulnerability can be exploited by an attacker t...

CVE-2023-36850

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC9600 allows an adjacent attacker on the local broadcast domain to cause a Denial of ServiceDoS...

Input validation

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC9600 allows an adjacent attacker on the local broadcast domain to cause a Denial of ServiceDoS...

CVE-2023-36834

An Incomplete Internal State Distinction vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series allows an adjacent attacker to cause a Denial of Service DoS. If an SRX is configured in L2 transparent mode the receipt of a specific genuine...

CVE-2023-36836

A Use of an Uninitialized Resource vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial of Service DoS. On all Junos OS and Junos OS Evolved platforms, in a Multicast only Fa...