Lucene search
+L

8720 matches found

CVE
CVE
•added 2021/09/14 8:43 p.m.•94 views

CVE-2021-23030

CVE-2021-23030 affects BIG-IP Advanced WAF/ASM: when a WebSocket profile is configured on a virtual server, undisclosed requests can cause the bd process to terminate, causing DoS. Affected versions include 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1...

7.5CVSS7.5AI score0.00961EPSS
SaveExploits0References1Affected Software2
NVD
NVD
•added 2021/09/14 6:15 p.m.•23 views

CVE-2021-23033

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

7.5CVSS0.00933EPSS
SaveExploits0References1
OSV
OSV
•added 2021/09/14 6:15 p.m.•13 views

CVE-2021-23033

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

7.5CVSS5.8AI score0.00933EPSS
SaveExploits0References1
Prion
Prion
•added 2021/09/14 6:15 p.m.•29 views

Code injection

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

4.3CVSS7.5AI score0.00933EPSS
SaveExploits0References1Affected Software2
attackerkb
attackerkb
•added 2021/09/14 6:15 p.m.•15 views

CVE-2021-23033

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

7.5CVSS7.2AI score0.00933EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/09/14 5:15 p.m.•37 views

CVE-2021-23033

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

7.7AI score0.00933EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2021/09/14 12:37 p.m.•15 views

undertow: buffer leak on incoming websocket PONG message may lead to DoS

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability...

7.5CVSS7.2AI score0.01677EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/14 12:00 a.m.•2 views

CVE-2021-23033: Improper Input Validation

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software version...

7.5CVSS5.7AI score0.00933EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/14 12:00 a.m.•6 views

CVE-2021-23030: Improper Input Validation

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software...

7.5CVSS5.7AI score0.00961EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2021/09/13 5:34 p.m.•7 views

undertow: buffer leak on incoming websocket PONG message may lead to DoS

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability...

7.5CVSS7.1AI score0.01677EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2021/09/09 6:18 a.m.•16 views

undertow: buffer leak on incoming websocket PONG message may lead to DoS

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability...

7.5CVSS7.2AI score0.01677EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2021/09/08 2:43 p.m.•12 views

undertow: buffer leak on incoming websocket PONG message may lead to DoS

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability...

7.5CVSS7.2AI score0.01677EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2021/09/08 1:36 p.m.•13 views

undertow: buffer leak on incoming websocket PONG message may lead to DoS

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability...

7.5CVSS7.2AI score0.01677EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2021/09/08 1:32 p.m.•14 views

undertow: buffer leak on incoming websocket PONG message may lead to DoS

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability...

7.5CVSS7.2AI score0.01677EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2021/09/08 1:05 p.m.•11 views

undertow: buffer leak on incoming websocket PONG message may lead to DoS

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability...

7.5CVSS7.2AI score0.01677EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2021/09/08 12:00 a.m.•12 views

The vulnerability of the Eventlet network library in Python software relates to uncontrolled resource consumption, allowing a hacker to perform a denial-of-service attack.

The vulnerability of the Eventlet web library in Python software relates to an uncontrolled resource consumption when processing large web socket messages. Exploiting this vulnerability could allow a malicious actor to perform a denial-of-service attack by sending compressed message data...

5.3CVSS6.5AI score0.01792EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2021/09/05 6:15 p.m.•24 views

CVE-2021-40516

WeeChat before 3.2.1 allows remote attackers to cause a denial of service crash via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin...

7.5CVSS6.5AI score
SaveExploits0References3
OSV
OSV
•added 2021/09/05 6:15 p.m.•4 views

DEBIAN-CVE-2021-40516

WeeChat before 3.2.1 allows remote attackers to cause a denial of service crash via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin...

7.5CVSS7.3AI score0.01594EPSS
SaveExploits0References1
Prion
Prion
•added 2021/09/05 6:15 p.m.•22 views

Out-of-bounds

WeeChat before 3.2.1 allows remote attackers to cause a denial of service crash via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin...

5CVSS7AI score0.01594EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
•added 2021/09/05 6:15 p.m.•42 views

CVE-2021-40516

WeeChat before 3.2.1 allows remote attackers to cause a denial of service crash via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin...

7.5CVSS7.1AI score0.01594EPSS
SaveExploits0References4
Rows per page
Query Builder