Lucene search
+L

2810 matches found

Rockylinux
Rockylinux
added 2022/11/15 6:23 a.m.41 views

dhcp security and enhancement update

An update is available for dhcp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Dynamic Host Configuration Protocol DHCP is a protocol that allows individua...

6.8CVSS7.2AI score0.03357EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/11/14 12:00 a.m.8 views

sonic-buildimage 安全漏洞

sonic-buildimage is an open source library for SONiC. Scripts to execute installable binary image builds for SONiC A security vulnerability exists in sonic-buildimage, which stems from a vulnerability in the DHCPv6 packet parsing code, which can be exploited by an attacker to craft a packet that...

8.1CVSS7.8AI score0.01159EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/11/14 12:00 a.m.13 views

PT-2022-13105 · Unknown · Dhcp6Relay

Name of the Vulnerable Software and Affected Versions: dhcp6relay affected versions not specified Description: The issue is related to a buffer overflow in the DHCPv6 packet parsing code, which could be exploited by a remote attacker to craft a packet that causes an out-of-bounds memory write,...

8.1CVSS7.6AI score0.01159EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/14 7:15 a.m.10 views

CVE-2022-2780

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack...

8.1CVSS5.8AI score0.00543EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/14 7:15 a.m.29 views

CVE-2022-2780

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack...

8.1CVSS0.00543EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/14 7:15 a.m.22 views

Cross site request forgery (csrf)

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack...

5.1CVSS8AI score0.00543EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/10/14 12:00 a.m.13 views

Octopus Server 安全漏洞

Octopus Server is an automated deployment platform. Octopus Server suffers from a security vulnerability that stems from a Git connection checker that can initiate an SMB connection, leading to an NTLM relay attack...

8.1CVSS7.7AI score0.00543EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/10/14 12:00 a.m.34 views

CVE-2022-2780

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack...

8.3AI score0.00543EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/14 12:00 a.m.68 views

CVE-2022-2780

CVE-2022-2780 affects Octopus Server. The issue arises when using the Git Connectivity test function on the VCS project, which can initiate an SMB request and potentially enable an NTLM relay attack. Connected sources confirm the vulnerability and its impact, but do not uniformly provide concrete...

8.1CVSS8AI score0.00543EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/14 12:00 a.m.9 views

PT-2022-18595 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue allows an attacker to use the Git Connectivity test function on the VCS project to initiate an SMB request, potentially leading to an NTLM relay attack. Recommendations: At...

8.1CVSS7.9AI score0.00543EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/10/14 12:00 a.m.8 views

CVE-2022-2780

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack...

8.1AI score0.00543EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
added 2022/09/15 3:28 p.m.13 views

Relay Attack against Teslas

Nice work: Radio relay attacks are technically complicated to execute, but conceptually easy to understand: attackers simply extend the range of your existing key using what is essentially a high-tech walkie-talkie. One thief stands near you while youre in the grocery store, intercepting your key...

0.6AI score
SaveExploits0
OSV
OSV
added 2022/09/01 9:15 p.m.7 views

DEBIAN-CVE-2022-2663

An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nfconntrackirc configured...

5.3CVSS6.1AI score0.03194EPSS
SaveExploits1References1
OSV
OSV
added 2022/09/01 9:15 p.m.9 views

UBUNTU-CVE-2022-2663

An issue was found in the Linux kernel in nfconntrackirc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nfconntrackirc configured...

5.3CVSS6.6AI score0.03194EPSS
SaveExploits1References28
OSV
OSV
added 2022/08/26 12:00 a.m.8 views

OSV-2022-780 Index-out-of-bounds in is_same_net6

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50599 Crash type: Index-out-of-bounds Crash state: issamenet6 dhcp6mayberelay dhcp6mayberelay...

7.2AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.7 views

Ubuntu: Security Advisory (USN-74-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
CNVD
CNVD
added 2022/08/17 12:00 a.m.130 views

Secheron SEPCOS Control and Protection Relay Information Disclosure Vulnerability

Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.The Secheron SEPCOS Control and Protection Relay is vulnerable to an...

6.5CVSS0.6AI score0.00765EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/15 12:15 p.m.21 views

CVE-2022-33993

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

5.3CVSS0.00925EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/15 12:15 p.m.8 views

CVE-2022-33993

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

5.3CVSS5.8AI score0.00925EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/08/15 12:15 p.m.4 views

CVE-2022-33993

Misinterpretation of special domain name characters in DNRD aka Domain Name Relay Daemon 2.20.3 leads to cache poisoning because domain names and their associated IP addresses are cached in their misinterpreted form...

5.3CVSS5.9AI score0.00925EPSS
SaveExploits0References5
Rows per page
Query Builder