5781 matches found
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583 Race condition in github.com/ntbosscher/gobase
A race condition can cause incorrect HTTP request routing...
CVE-2022-2583
CVE-2022-2583 describes a race condition in the GoBase library (github.com/ntbosscher/gobase) that can lead to incorrect HTTP request routing. The core issue is a concurrency/problem in GoBase that affects request routing logic, with a base CVSS v3.1 score of 3.7 (LOW) from NVD/Security CVSS data...
CVE-2022-22184 Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...
CVE-2022-22184
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...
Input validation
An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...
USN-5775-1 vim vulnerabilities
It was discovered that Vim uses freed memory in recurisve substitution of specially crafted patterns. An attacker could possbly use this to crash Vim and cause denial of service. CVE-2022-2345 It was discovered that Vim makes illegal memory calls when patterns start with an illegal byte. An...
Exploit for Authentication Bypass by Spoofing in Apache Apisix
POCs Collected POCs CVE-2022-24112 To create a test...
CVE-2020-23587
A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp "...
CVE-2020-23587
A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp "...
Elevation of Privilege Vulnerability in FRRouting
FRRouting is FRRouting Project open source a network routing software suite running on a Unix-like platform . FRRouting security vulnerabilities , an attacker can exploit the vulnerability by creating a configuration to bypass its restrictions on the way to elevation of privilege...
PT-2022-8680 · Optilink · Optilink Op-Xt71000N
Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP V3.3.1-191028 Description: A vulnerability allows an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack, enabling a man-in-the-middle attack b...
Optilink Network OP-XT71000N 跨站请求伪造漏洞
The Optilink Network OP-XT71000N is a wireless router from Optilink Network India. A cross-site request forgery vulnerability exists in the Optilink Network OP-XT71000N version V2.2, which originates from a vulnerability that could allow an unauthenticated, remote attacker to implement cross-site...
frr security, bug fix, and enhancement update
Tue Jun 14 2022 Michal Ruprich - 8.2.2-4 - Resolves: 2095404 - frr use systemd-sysusers 8.2.2-3 - Resolves: 2081304 - Enhanced TMT testing for centos-stream 8.2.2-2 - Resolves: 2069571 - the dynamic routing setup does not work any more 8.2.2-1 - Resolves: 2069563 - Rebase frr to version 8.2.2...
SD-WAN Integration: Routing Traffic to Optimize Network Performance
Optimize network performance with SD-WAN integration to automatically route traffic to the nearest Akamai Secure Internet Access point of presence...
Design/Logic Flaw
A vulnerability in the generic routing encapsulation GRE tunnel decapsulation feature of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory handling err...
frr security, bug fix, and enhancement update
An update is available for frr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It suppor...
NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2022-0078)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - An out-of-bounds memory write flaw was found in how the Linux kernel's Voice Over IP H.323 connection tracking functionality handled connections on...
[SECURITY] Fedora 37 Update: exim-4.96-5.fc37
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
Cisco Firepower Threat Defense Software Generic Routing Encapsulation DoS (cisco-sa-ftd-gre-dos-hmedHQPM)
According to its self-reported version, Cisco FTD Software is affected by a denial of service vulnerability. An unauthenticated, remote attacker can exploit this, by sending a crafted GRE payload through an affected device, to cause the affected device to restart. Please see the included Cisco BI...