CVE-2021-31375 Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed

An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI, allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed...

CVE-2021-31375

CVE-2021-31375 describes an Improp er Input Validation vulnerability in the routing process daemon (RPD) of Juniper Networks Junos OS . When devices are configured with BGP origin validation using RP KI (RPKI) , a crafted BGP update can bypass RPKI policy checks, enabling a spoofed advertisement ...

CVE-2021-31375

An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI, allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed...

SUSE: Security Advisory (SUSE-SU-2012:0084-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of Google Chrome browser extensions, related to deficiencies in access control for certain functions, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s browser extensions is related to insufficient checks of the policy. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the SerialPort component in the Google Chrome browser allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SerialPort component in Google Chrome browsers is related to insufficient checks on policies. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions...

OpenCSPM - Open Cloud Security Posture Management Engine

Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? Security teams running infrastructure in cloud environments looking to gain...

PT-2020-15036 · Apache · Apache Accumulo

Name of the Vulnerable Software and Affected Versions: Apache Accumulo versions 1.5.0 through 1.10.0 Apache Accumulo version 2.0.0 Description: The issue arises from improper checking of return values of certain policy enforcement functions, specifically the canFlush and canPerformSystemActions...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to gain access to confidential data.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient checks on the implementation of the policy within the module. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Privilege Escalation

firefox is vulnerable to privilege escalation. The vulnerability exists in the way Firefox loaded XML User Interface Language XUL scripts. Firefox and certain add-ons could load malicious content when certain policy checks did not happen...

The vulnerability of Google Chrome’s browser, related to insufficient checking of Service Worker policies, allows a hacker to circumvent navigation restrictions.

The vulnerability of Google Chrome relates to insufficient checks on policies in Service Workers. Exploiting this vulnerability could allow a malicious actor to circumvent navigation restrictions through a specially created HTML page...

The vulnerability of the password generation and quality assessment library in Astra Linux’s operating system, libpam-pwquality, is related to a configuration error that allows an attacker to gain unauthorized access to the system.

The vulnerability of the password generation and quality assessment library in the Astra Linux operating system is related to a configuration error that causes no checks are performed to ensure that domain user passwords comply with the specified security policies. Exploiting this vulnerability...

Cisco IOS Compliance Check: Failed

Lists all the Cisco IOS Compliance Policy Checks which did NOT pass. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Nexus 9000 Series Switches Access List Bypass Vulnerability (Cisco-SA-20140806-CVE-2014-3330)

A vulnerability in the implementation of the access list logging feature of Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to bypass the access list restriction for the logged traffic. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be...

Cisco Nexus 9000 Series Switches Access List Bypass Vulnerability

A vulnerability in the implementation of the access list logging feature of Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to bypass the access list restriction for the logged traffic. The vulnerability is due to insufficient policy checks for the logged packets...

PT-2014-5223

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.12I21 Description The issue is related to the improper processing of packet-drop policy checks for logged packets, allowing remote attackers to bypass intended access restrictions. This can be achieved by sending a flood ...

CPE Policy Check

This VT is running CPE-based Policy Checks. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Active Defense class software generic implementation vulnerability-a vulnerability warning-the black bar safety net

Active Defense software in the realization of the presence of a Common Vulnerability, malware can take to bypass security checks to perform malicious acts The main anti-block system some of the key operation in these monitoring points do parameter checking. Because the parameters often come from...

openssl: double-free in policy checks

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509VFLAGPOLICYCHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check...

openssl: double-free in policy checks

Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509VFLAGPOLICYCHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check...