CVE-2023-36831

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

CVE-2023-36831

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

Input validation

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

CVE-2023-36831 Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

CVE-2023-36831 Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM Unified Threat Management Web-Filtering feature of Juniper Networks Junos OS on SRX Series causes a jbuf memory leak to occur when accessing certain websites, eventually leading to a Denial of Service DoS condition...

DEBIAN-CVE-2023-2975

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misl...

UBUNTU-CVE-2023-2975

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misl...

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to the breach of the buffer boundary, allows attackers to execute arbitrary code by sending specially crafted SSL packets.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to a breach of the buffer boundary. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by sending specially crafted SS...

Vulnerabilities fixed in FortiNet FortiOS and FortiProxy

FortiNet has fixed vulnerabilities in FortiOS and FortiProxy. A malicious party could exploit the vulnerabilities to execute arbitrary execute arbitrary code on the vulnerable system, or under specific circumstances to take over a user's session. The vulnerability with attribute CVE-2023-33308...

YSoft SAFEQ 6 安全漏洞

YSoft SAFEQ 6 is an enterprise print management suite solution platform from the Czech company YSoft. A security vulnerability exists in YSoft SAFEQ 6 Server versions prior to 6.0.82, which stems from the fact that when changing the URL of an LDAP server configuration from LDAPS to LDAP, the syst...

ssl.streampartner.nl Cross Site Scripting vulnerability OBB-3507630

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] [DLA 3491-1] erlang security update

Debian LTS Advisory DLA-3491-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 11, 2023 https://wiki.debian.org/LTS Package : erlang Version : 1:22.2.7+dfsg-1+deb10u1 CVE ID : CVE-2022-37026 Debian Bug : 1024632 A Client Authentication Bypass vulnerability ha...

PT-2023-3490

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.10 FortiOS versions 7.2.0 through 7.2.3 FortiProxy versions 7.0.0 through 7.0.9 FortiProxy versions 7.2.0 through 7.2.2 Description A stack-based overflow vulnerability in Fortinet FortiOS and FortiProxy allo...

Protect

A stack-based overflow vulnerability CWE-124 in FortiOS & FortiProxy may allow a remote attacker to execute arbitrary code or command via crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection...

Debian dla-3491 : erlang - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3491 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3491-1 [email protected] https://www.debian.org/lts/security/...

Fortinet Fortigate Proxy mode with deep inspection - Stack-based buffer overflow (FG-IR-23-183)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-183 advisory. - A stack-based overflow vulnerability CWE-124 in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and...

Cisco Adaptive Security Appliance Software SSL/TLS Client DoS (cisco-sa-ssl-client-dos-cCrQPkA)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a denial of service DoS vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco ASA Software. This vulnerability is due to improper memory management when a...

Cisco Firepower Threat Defense Software SSL/TLS Client DoS (cisco-sa-ssl-client-dos-cCrQPkA)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by a denial of service DoS vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS handler of Cisco FTD Software. This vulnerability is due to improper memory management when a devic...

cn.ponfee:commons-core (>=1.1 <=1.4), com.fuseanalytics.gradle.sslcertgen:com.fuseanalytics.gradle.sslcertgen.gradle.plugin (=1.0.0) +9 more potentially affected by CVE-2023-33201 via org.bouncycastle:bcprov-ext-jdk18on (>=1.71 <=1.73)

org.bouncycastle:bcprov-ext-jdk18on MAVEN version =1.71, =1.1, =2.2.9, =6.0, =6.0, =6.0, =9.0.14, =13.0.1 Source cves: CVE-2023-33201 Source advisory: OSV:GHSA-HR8G-6V94-X4M9...

Alert: 330,000 FortiGate Firewalls Still Unpatched to CVE-2023-27997 RCE Flaw

No less than 330,000 FortiGate firewalls are still unpatched and vulnerable to CVE-2023-27997, a critical security flaw affecting Fortinet devices that has come under active exploitation in the wild. Cybersecurity firm Bishop Fox, in a report published last week, said that out of nearly 490,000...