Lucene search
+L

15277 matches found

ATTACKERKB
ATTACKERKB
added 2021/07/07 4:00 p.m.6 views

CVE-2021-1595

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. These...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/07/07 4:00 p.m.6 views

CVE-2021-1598

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP implementation for Cisco Video Surveillance 7000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. These...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References2
OSV
OSV
added 2021/06/29 9:45 p.m.23 views

GHSA-P55X-7X9V-Q8M4 Denial of Service in miekg-dns

A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections...

7.5CVSS7.2AI score0.01852EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2021/06/29 9:45 p.m.48 views

Denial of Service in miekg-dns

A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections...

7.5CVSS3AI score0.01852EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2021/06/29 12:15 p.m.3 views

DEBIAN-CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

7.8CVSS6.5AI score0.00361EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/29 12:15 p.m.12 views

UBUNTU-CVE-2021-28691

Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will...

7.8CVSS6.7AI score0.00361EPSS
SaveExploits0References6
OSV
OSV
added 2021/06/25 7:15 p.m.14 views

CVE-2021-21005

In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards...

7.5CVSS7.1AI score0.00678EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/25 7:15 p.m.6 views

CVE-2021-21003

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...

5.3CVSS6AI score0.00946EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/25 7:15 p.m.26 views

CVE-2021-21003

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...

5.3CVSS0.00946EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/25 7:15 p.m.26 views

Code injection

In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected...

5CVSS5.3AI score0.00946EPSS
SaveExploits0References1Affected Software15
Prion
Prion
added 2021/06/25 7:15 p.m.23 views

Authentication flaw

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

7.8CVSS7.5AI score0.01493EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/25 6:26 p.m.30 views

CVE-2021-33541 Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

7.5CVSS7.7AI score0.01493EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/25 12:15 p.m.20 views

Code injection

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window of the listening device before the transmitting device initiates its packet transmission to achieve full MITM status...

2.9CVSS5.2AI score0.00402EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/06/25 11:59 a.m.48 views

CVE-2021-31615

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window of the listening device before the transmitting device initiates its packet transmission to achieve full MITM status...

5.5AI score0.00402EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/06/25 12:00 a.m.45 views

Zephyr Denial of Service Vulnerability

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from a security vulnerability that results from unchecked packets from Bluetooth. No details of the vulnerability are provided at this time...

6.5CVSS6.9AI score0.00381EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2021/06/23 3:45 a.m.232 views

USN-5001-1: Linux kernel (OEM) vulnerabilities

Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. CVE-2021-3609 Mathy Vanhoef discovered that the Linux kernel’s WiFi implementati...

8.8CVSS7.5AI score0.07604EPSS
SaveExploits9
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:00 a.m.8 views

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the Linux operating system allows attackers to inject arbitrary network packets, regardless of the network configuration.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets regardless of the network configuration...

6.5CVSS7AI score0.03515EPSS
SaveExploits0References25Affected Software13
CNNVD
CNNVD
added 2021/06/23 12:00 a.m.13 views

FISCO BCOS 输入验证错误漏洞

FISCO BCOS is a blockchain underlying platform. FISCO-BCOS suffers from an input validation error vulnerability that stems from a possible bug in the blockchain node's handling of unformatted packets, which can lead to a crash...

7.5CVSS7.3AI score0.0125EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:00 a.m.10 views

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the Linux operating system allows attackers to compromise the integrity of protected information.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using specially crafted...

5.4CVSS6.9AI score0.07604EPSS
SaveExploits0References35Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:00 a.m.10 views

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in the Linux operating system allows attackers to compromise the integrity of protected information.

The vulnerability of implementations of WEP, WPA, WPA2, and WPA3 algorithms in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using specially crafted...

5.3CVSS6.9AI score0.05622EPSS
SaveExploits0References15Affected Software5
Rows per page
Query Builder