Lucene search
+L

2373 matches found

Positive Technologies
Positive Technologies
•added 2022/03/18 12:00 a.m.•4 views

PT-2022-29200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/03/15 12:00 a.m.•1 views

PT-2022-7507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the ice update vsi tx ring stats function, which updates Tx ring stats. This can lead to a denial of service. The problem occurs...

5.5CVSS5.5AI score0.0022EPSS
SaveExploits0
CNVD
CNVD
•added 2022/03/04 12:00 a.m.•24 views

CyberArk Identity Security Feature Issue Vulnerability

CyberArk Identity, a CyberArk company, provides the most complete identity security platform to secure all identities from end-to-end.CyberArk Identity is vulnerable to a security signature issue that stems from the fact that the StartAuthentication resource exposes the response header X-CFY-TX-T...

5.3CVSS2.1AI score0.01115EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/03 7:15 p.m.•21 views

CVE-2022-22700

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant...

5.3CVSS5.7AI score0.01115EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/03 7:15 p.m.•40 views

CVE-2022-22700

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant...

5.3CVSS0.01115EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/03/03 6:20 p.m.•51 views

CVE-2022-22700

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant...

5.5AI score0.01115EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/03 6:20 p.m.•96 views

CVE-2022-22700

CyberArk Identity (versions up to 22.1) exposes the response header X-CFY-TX-TM in the StartAuthentication resource. In certain configurations this header contains predictable value ranges that can be used to infer whether a user exists in the tenant. The CVE is CVE-2022-22700; it is a header lea...

5.3CVSS5.2AI score0.01115EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/03/03 12:00 a.m.•17 views

CyberArk Identity 安全特征问题漏洞

CyberArk Identity, a CyberArk company, provides the most complete identity security platform to secure all identities from end-to-end.CyberArk Identity is vulnerable to a security signature issue that stems from the fact that the StartAuthentication resource exposes the response header X-CFY-TX-T...

5.3CVSS5.6AI score0.01115EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/03/03 12:00 a.m.•1 views

PT-2022-15641

Name of the Vulnerable Software and Affected Versions CyberArk Identity versions up to and including 22.1 Description The issue exposes the response header X-CFY-TX-TM in the 'StartAuthentication' resource. In certain configurations, this response header contains different, predictable value rang...

5.3CVSS0.01115EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/03 12:00 a.m.•5 views

CVE-2022-22700: Use of Insufficiently Random Values

CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant...

5.3CVSS5.8AI score0.01115EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/25 12:00 a.m.•14 views

PT-2022-7625 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.10-1.32.fc32.qubes.x86 64+ 226 Description: The vulnerability is related to the xen/netfront component of the Linux kernel. It occurs because xennet destroy queues relies on info-netdev-real num tx queues t...

8.4CVSS6AI score0.01915EPSS
SaveExploits13References1616
Positive Technologies
Positive Technologies
•added 2022/01/10 12:00 a.m.•1 views

PT-2022-28348

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.13 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/01/10 12:00 a.m.•1 views

PT-2022-28336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.90 Description The issue is related to the net/mlx5e component, specifically with wrapping the tx reporter dump callback to extract the sq. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/01/01 12:00 a.m.•1 views

PT-2025-8129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the reset and transmit paths in the Linux kernel's ibmvnic driver. This can lead to a crash when the ibmvnic xmit function accesses a tx scrq after it has...

9.8CVSS0.00496EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/01 12:00 a.m.•0 views

PT-2025-8024

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the issue described. Description A vulnerability in the Linux kernel has been resolved. The issue occurs when the rx/tx ring buffer size is changed, causing a kernel panic wh...

7.8CVSS0.0026EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/22 12:00 a.m.•22 views

PT-2021-8079 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.13.0 mlnx Description: The vulnerability is related to the function mlx5e tx reporter dump sq in the net/mlx5e component of the Linux kernel. This function casts its void argument to struct mlx5e txqsq , but in the...

7.8CVSS6.4AI score0.08793EPSS
SaveExploits10References1647
attackerkb
attackerkb
•added 2021/12/21 5:15 p.m.•9 views

CVE-2021-43839

Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has been patched in Cronos v0.6.5. There are ...

7.5CVSS7AI score0.01313EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/19 12:00 a.m.•2 views

PT-2021-27009

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.6 Description The issue is related to the reconfiguration of the network interface, specifically with the stmmac driver. When reconfiguring the interface, Tx queues are not properly disabled, which may lead...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2021/11/14 3:22 p.m.•24 views

GSD-2021-1002162 ice: fix locking for Tx timestamp tracking flush

ice: fix locking for Tx timestamp tracking flush This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/11/14 3:22 p.m.•18 views

UVI-2021-1002162 ice: fix locking for Tx timestamp tracking flush

ice: fix locking for Tx timestamp tracking flush This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

7.2AI score
SaveExploits0
Rows per page
Query Builder