Lucene search
+L

2809 matches found

The Hacker News
The Hacker News
added 2021/06/08 10:00 a.m.46 views

Top 10 Privacy and Security Features Apple Announced at WWDC 2021

Apple on Monday announced a number of privacy and security-centric features to its upcoming versions of iOS and macOS at its all-online Worldwide Developers Conference. Here is a quick look at some of the big-ticket changes that are expected to debut later this fall: 1 — Decouple Security Patches...

6.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/06/07 12:00 a.m.238 views

Trojan-Dropper.Win32.Googite.a Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/ff30fbee3724d80dcb9471c0b553c99a.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Googite.a Vulnerability: Unauthenticated Open Proxy Description: Googite malwar...

0.1AI score
SaveExploits0
OSV
OSV
added 2021/05/21 4:23 p.m.48 views

GHSA-X462-89PF-6R5H Crash due to malformed relay protocol message

Impact 1. syncthing can be caused to crash and exit if sent a malformed relay protocol message message with a negative length field. 2. The relay server strelaysrv can be caused to crash and exit if sent a malformed relay protocol message with a negative length field. At no point is sensitive dat...

7.5CVSS7.3AI score0.0197EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/05/21 4:23 p.m.113 views

Crash due to malformed relay protocol message

Impact 1. syncthing can be caused to crash and exit if sent a malformed relay protocol message message with a negative length field. 2. The relay server strelaysrv can be caused to crash and exit if sent a malformed relay protocol message with a negative length field. At no point is sensitive dat...

7.5CVSS0.7AI score0.0197EPSS
SaveExploits0References6Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/11 12:00 a.m.37 views

Security update for syncthing (moderate)

openSUSE Security Update: Security update for syncthing Announcement ID: openSUSE-SU-2021:0713-1 Rating: moderate References: 1184428 Cross-References: CVE-2021-21404 CVSS scores: CVE-2021-21404 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP...

7.5CVSS7.2AI score0.0197EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/08 12:00 a.m.27 views

Security update for syncthing (moderate)

openSUSE Security Update: Security update for syncthing Announcement ID: openSUSE-SU-2021:0688-1 Rating: moderate References: 1184428 Cross-References: CVE-2021-21404 CVSS scores: CVE-2021-21404 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update...

7.5CVSS7.2AI score0.0197EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/22 8:15 p.m.16 views

CVE-2021-0267

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

6.5CVSS6.6AI score0.00466EPSS
SaveExploits0References2
NVD
NVD
added 2021/04/22 8:15 p.m.31 views

CVE-2021-0267

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

7.4CVSS0.00466EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/22 8:15 p.m.25 views

Input validation

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

3.3CVSS6.4AI score0.00466EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/22 7:37 p.m.67 views

CVE-2021-0267

Summary: CVE-2021-0267 is an input validation flaw in JDHCPD’s DHCP Relay Agent (active-lease query) in Juniper Junos OS. An attacker can trigger a crash of the jdhcpd DHCP service by sending a crafted DHCP packet, causing a Denial of Service. Affected Junos OS versions include 19.4 before 19.4R3...

7.4CVSS6.6AI score0.00466EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/14 4:00 p.m.7 views

CVE-2021-0267

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

7.4CVSS6.5AI score0.00466EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2021/04/07 4:33 a.m.21 views

Denial Of Service (DoS)

github.com/syncthing/syncthing is vulnerable to denial of service. An attacker is able to crash the application by sending a malicious relay protocol message containing a negative length field...

7.5CVSS4.2AI score0.0197EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2021/04/06 8:15 p.m.1 views

DEBIAN-CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/06 8:15 p.m.11 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS0.0197EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/06 8:15 p.m.8 views

UBUNTU-CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0References6
Prion
Prion
added 2021/04/06 8:15 p.m.17 views

Design/Logic Flaw

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

5CVSS7AI score0.0197EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/04/06 8:15 p.m.27 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7AI score0.0197EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/04/06 8:00 p.m.50 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/04/06 8:00 p.m.25 views

CVE-2021-21404 Crash due to malformed relay protocol message

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.3AI score0.0197EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2021/04/06 8:00 p.m.73 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0
Rows per page
Query Builder