Lucene search
+L

1837 matches found

CVE
CVE
added 2022/09/27 6:40 p.m.120 views

CVE-2021-27862

CVE-2021-27862 is a Layer 2 network filtering bypass vulnerability where IPv6 RA/RA guard-like filtering can be bypassed via LLC/SNAP headers with invalid length and Ethernet-to-WiFi frame translation (and optionally VLAN0 headers). Public documents confirm exposure across vendor devices (e.g., C...

4.7CVSS4.6AI score0.00641EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/27 6:40 p.m.9 views

CVE-2021-27862 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...

4.8AI score0.00641EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/09/27 6:40 p.m.29 views

CVE-2021-27862 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with an invalid length during Ethernet to Wifi frame translation

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...

5.1AI score0.00641EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2022/09/27 6:40 p.m.6 views

CVE-2021-27861 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...

4.8AI score0.00595EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/09/27 6:40 p.m.61 views

CVE-2021-27861 L2 network filtering bypass using stacked VLAN0 and LLC/SNAP headers with invalid lengths

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...

5.2AI score0.00595EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/09/27 6:40 p.m.48 views

CVE-2021-27854 L2 network filtering bypass using stacked VLAN0, LLC/SNAP headers, and Ethernet to Wifi frame translation

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using combinations of VLAN 0 headers, LLC/SNAP headers, and converting frames from Ethernet to Wifi and its reverse...

5.1AI score0.00665EPSS
SaveExploits0References5
NVD
NVD
added 2022/09/27 6:15 p.m.39 views

CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

4.7CVSS0.0071EPSS
SaveExploits1References7
OSV
OSV
added 2022/09/27 6:15 p.m.7 views

CVE-2021-27853

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

4.7CVSS5.8AI score0.0071EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2022/09/27 5:55 p.m.40 views

CVE-2021-27853 L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

5.2AI score0.0071EPSS
SaveExploits1References6
CVE
CVE
added 2022/09/27 5:55 p.m.121 views

CVE-2021-27853

CVE-2021-27853 vulnerability affects Layer 2 filtering controls by bypassing VLAN 0 header stacks and LLC/SNAP headers. Arista reports two variants: VLAN 0 header stack variant and LLC header invalid length variant, impacting EOS products, Wi‑Fi access points, and NetVisor OS. Effects include pot...

4.7CVSS4.7AI score0.0071EPSS
SaveExploits1References7Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/27 5:55 p.m.9 views

CVE-2021-27853 L2 network filtering can be bypassed using stacked VLAN0 and LLC/SNAP headers

Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0 headers and LLC/SNAP headers...

6.9AI score0.0071EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/09/27 12:0 a.m.9 views

多款Cisco产品安全漏洞

Cisco IOS and others are products of Cisco Corporation.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system.Cisco Small Business is a switch.Cisco IOS XE Software is an operating system.Cisco Small Business is a switch. Cisco IOS...

4.7CVSS5.2AI score0.0071EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2022/09/27 12:0 a.m.7 views

PT-2022-4863 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the implementation of the Ethernet encapsulation protocol, specifically concerning the combination of headers. This could allow ...

4.7CVSS4.6AI score0.0071EPSS
SaveExploits1References14
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.40 views

CVE-2022-3042

Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00511EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.24 views

CVE-2022-3046

Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00822EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.32 views

CVE-2022-3195

Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.0104EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.39 views

CVE-2022-2854

Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00678EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.31 views

CVE-2022-3044

Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.7AI score0.00867EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.35 views

CVE-2022-3049

Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00563EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.50 views

CVE-2022-2852

Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.02557EPSS
SaveExploits0References1
Rows per page
Query Builder