CVE-2021-31922

An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3...

CVE-2021-31922

CVE-2021-31922 is an HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager (vTM) prior to 21.1. The issue allows an attacker to smuggle an HTTP request through an HTTP/2 header, with fixes in 21.1 and earlier maintenance releases (20.3R1, 20.2R1, 20.1R2, 19.2R4, 18.2R3). Re...

Pulse Secure Virtual Traffic Manager 环境问题漏洞

PulseSecure Virtual Traffic Manager is an application from PulseSecure, Inc. It provides load balancing and application delivery capabilities with high performance. A vulnerability exists in Virtual Traffic Manager. A remote attacker could perform an HTTP request smuggling attack. The following...

Cisco IOS XE Software for Network Convergence System 520 Routers Denial of Service Vulnerability

A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System NCS 520 Routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the web management interface of an affected device. This vulnerability is due ...

CVE-2021-22982

On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Development EoSD are not evaluated...

AskF5 BIG-IP Buffer Error Vulnerability

AskF5 BIG-IP is an application from AskF5 USA. Provides Wide Area Traffic Manager GTM provides a smarter way to respond to DNS queries. A buffer error vulnerability exists in BIG-IP DNS and GTM that originates when a network system or product performs an operation in memory without properly...

F5 BIG-IP DNS/GTM Security Vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 Corporation. A security vulnerability exists in F5 BIG-IP DNS/GTM, which can be exploited by an attacker to trigger a denial of...

F5 Networks BIG-IP : BIG-IP HTTP profile vulnerability (K70275209)

Undisclosed HTTP behavior may lead to a denial of service. CVE-2020-5857 Impact This vulnerability impacts the BIG-IP data plane virtual servers with HTTP profiles. A BIG-IP module that has a virtual server with an associated HTTP profile and is processing traffic is impacted. C Tenable Network...

F5 BIG-IP Local Traffic Manager Input Validation Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. Local Traffic Manager LTM is one of the local traffic managers. A security vulnerability exists in F5 BIG-IP LTM. An attacker could exploit this...

CVE-2019-6630

On F5 SSL Orchestrator 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, undisclosed traffic flow may cause TMM to restart under certain circumstances...

F5 Networks BIG-IP : BIG-IP SNMPD vulnerability (K12139752)

Under certain conditions, the snmpd process may leak memory on a multi-blade BIG-IP Virtual Clustered Multiprocessing vCMP guest when processing authorized SNMP requests. CVE-2019-6608 Impact Over time, the snmpd process consumes excessive memory, forcing the BIG-IP system to slow down and...

Pulse Secure Virtual Traffic Manager Cross-Site Scripting Vulnerability

Pulse Secure Virtual Traffic Manager is a software-based, high-performance application delivery controller from Pulse Secure, USA. A cross-site scripting vulnerability exists in the web management user interface in Pulse Secure Virtual Traffic Manager versions 9.9 prior to 9.9r2 and versions prio...

CVE-2018-20307

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...

CVE-2018-20307

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...

CVE-2018-20306

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

CVE-2018-20306

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

CVE-2018-20307

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...

CVE-2018-20306

CVE-2018-20306 is a stored XSS vulnerability in the web administration UI of Pulse Secure Virtual Traffic Manager (vTM). Affected: vTM 9.9 before 9.9r2, 10.4r1, and 17.2r1 (per multiple sources). The issue can let an authenticated remote attacker inject script/HTML via a crafted website to steal ...

CVE-2018-20307

CVE-2018-20307 affects Pulse Secure Virtual Traffic Manager (vTM) . Affected releases include vTM 9.9 prior to 9.9r2 , 10.4r1 , and 17.2r1 . The root cause is incorrect permission validation, which could allow a remote authenticated user to obtain sensitive historical activity information. Per pu...