CVE-2021-0281

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

Design/Logic Flaw

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

CVE-2021-0281

CVE-2021-0281 affects Juniper Networks Junos OS and Junos OS Evolved. A crafted BGP origin validation/ RPki packet from the RPKI cache server can crash and restart the routing process daemon (RPD), causing a DoS. Affected releases include Junos OS 17.3 (before 17.3R3-S12), 17.4 (before 17.4R3-S5)...

CVE-2021-0281 Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

CVE-2021-0281

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

AVEVA System Platform (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable from adjacent network/low attack complexity Vendor: AVEVA Software, LLC Equipment: System Platform Vulnerabilities: Missing Authentication for Critical Function, Uncaught Exception, Path Traversal, Origin Validation Error, Improper...

Podman Origin Validation Error

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman versions from 1.8.0...

Sifchain: CORS (Cross-Origin Resource Sharing) origin validation failure -Any website can issue requests made with user credentials and read the responses to th

Welcome! ==In this report I want to describe a high-level bug that can seriously put a user account at risk.== CORS Cross-Origin Resource Sharing defines a mechanism to enable client-side cross-origin requests. This application is using CORS in an insecure way. The web application fails to proper...

CVE-2020-15734

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

CVE-2020-15734

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

Design/Logic Flaw

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

CVE-2020-15734 Same-origin policy vulnerability in Bitdefender Safepay

An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29...

CVE-2020-15734

CVE-2020-15734 describes an Origin Validation Error in Bitdefender Safepay that lets an attacker manipulate the browser’s file upload capability to access other files in the same directory or sub-directories. Affected: Bitdefender Safepay versions prior to 25.0.7.29. Root cause: origin validation...

Prisma Cloud Compute Data Forgery Issue Vulnerability

A data forgery issue vulnerability exists in Prisma Cloud Compute that arises from a network system or product that does not adequately validate the origin or authenticity of data. An attacker could exploit the falsified data to conduct an attack...

IBM API Connect 跨站请求伪造漏洞

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing and securing APIs, microservices and more. IBM API Connect suffers from a cross-site request forgery vulnerability, which arises from a WEB...

CVE-2020-28707

The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting XSS via stockdiocharthistorical-wp.js in wp-content/plugins/stockdio-historical-chart/assets/ because the origin of a postMessage event is not validated. The stockdioeventer function listens for an...

CVE-2020-15733

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29...

Input validation

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29...

CVE-2020-15733 URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958)

An Origin Validation Error vulnerability in the SafePay component of Bitdefender Antivirus Plus allows a web resource to misrepresent itself in the URL bar. This issue affects: Bitdefender Antivirus Plus versions prior to 25.0.7.29...

CVE-2020-15733

CVE-2020-15733 describes an Origin Validation Error in Bitdefender Antivirus Plus’s SafePay component that allows a web resource to misrepresent itself in the browser URL bar. Connected documents confirm the vulnerability affects Bitdefender Antivirus Plus versions prior to 25.0.7.29. The root ca...