Lucene search
+L

15241 matches found

CNNVD
CNNVD
added 2023/03/27 12:00 a.m.63 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple, Inc. Apple tvOS suffers from a buffer error vulnerability, which stems from the fact that processing maliciously crafted Bluetooth packets may result in a process memory leak...

6.5CVSS6.7AI score0.00348EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/03/27 12:00 a.m.4 views

CVE-2023-24094

An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...

7.4AI score0.00822EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/03/27 12:00 a.m.35 views

CVE-2023-24094

An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...

7.5AI score0.00822EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/03/27 12:00 a.m.66 views

Tenda G103 Command Injection Vulnerability

Tenda G103 is an enterprise-grade Ap router from Tenda China. The Tenda G103 suffers from a command injection vulnerability that can be exploited by an attacker to obtain sensitive information via a crafted packet...

7.5CVSS7.4AI score0.01865EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
added 2023/03/25 7:00 a.m.7 views

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100% causing a denial of service condition.

...

7.5CVSS6.6AI score0.05095EPSS
SaveExploits0
OSV
OSV
added 2023/03/23 5:15 p.m.10 views

CVE-2023-20072

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service DoS condition. This vulnerability is due to the improper handling of large...

8.6CVSS5.8AI score0.0098EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/23 5:15 p.m.29 views

Design/Logic Flaw

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service DoS condition. This vulnerability is due to the improper handling of large...

5CVSS8.3AI score0.0098EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/23 12:00 a.m.12 views

Cisco IOS XE Software 安全漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE Software that stems from improper...

8.6CVSS7.9AI score0.0098EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/23 12:00 a.m.14 views

CVE-2023-20027 Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly VFR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper reassembly of large packe...

8.6CVSS7.2AI score0.0098EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/23 12:00 a.m.16 views

Tenda G103 命令注入漏洞

Tenda G103 is an enterprise-grade Ap router from Tenda China. The Tenda G103 suffers from a command injection vulnerability that can be exploited by an attacker to obtain sensitive information via a crafted packet...

7.5CVSS7.3AI score0.01865EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/03/23 12:00 a.m.51 views

CVE-2023-20027 Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly VFR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper reassembly of large packe...

8.6CVSS8.5AI score0.0098EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/03/23 12:00 a.m.10 views

CVE-2023-20072 Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service DoS condition. This vulnerability is due to the improper handling of large...

8.6CVSS7.5AI score0.0098EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/03/22 11:00 p.m.6 views

CVE-2023-20072

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service DoS condition. This vulnerability is due to the improper handling of large...

8.6CVSS7.3AI score0.0098EPSS
SaveExploits0References2
Cisco
Cisco
added 2023/03/22 4:00 p.m.55 views

Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service DoS condition. This vulnerability is due to the improper handling of large...

8.6CVSS8.6AI score0.0098EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/22 8:44 a.m.9 views

SUSE-SU-2023:0870-1 Security update for slirp4netns

This update for slirp4netns fixes the following issues: - CVE-2020-29129: Fixed out-of-bounds access while processing NCSI packets bsc1179466. - CVE-2020-29130: Fixed out-of-bounds access while processing ARP packets bsc1179467...

4.3CVSS6AI score0.01888EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/03/22 12:00 a.m.8 views

PT-2023-1888 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the fragmentation handling code of tunnel protocol packets could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting ...

8.6CVSS8.3AI score0.0098EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/03/22 12:00 a.m.8 views

PT-2023-2218 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly VFR feature could allow an unauthenticated, remote attacker to cause a denial of service DoS...

8.6CVSS8.3AI score0.0098EPSS
SaveExploits0References7
NVD
NVD
added 2023/03/21 6:15 p.m.44 views

CVE-2022-36429

A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-crafted JSON object can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this vulnerability...

7.2CVSS7.2AI score0.01987EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/21 6:15 p.m.31 views

Command injection

A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-crafted JSON object can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this vulnerability...

5.8CVSS7.1AI score0.01987EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/03/21 5:41 p.m.55 views

CVE-2022-36429

A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS750 4.6.8.5. A specially-crafted JSON object can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this vulnerability...

7.2CVSS7.3AI score0.01987EPSS
SaveExploits1References2
Rows per page
Query Builder