Lucene search
+L

1198 matches found

Positive Technologies
Positive Technologies
added 2023/01/01 12:00 a.m.6 views

PT-2025-49725

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's IIO subsystem, specifically within the ina2xx driver, related to a NULL pointer dereference during device tree matching. This occurs when the device...

6.6AI score0.00241EPSS
SaveExploits0
OSV
OSV
added 2022/12/26 9:15 p.m.10 views

CVE-2019-18177

In certain Citrix products, information disclosure can be achieved by an authenticated VPN user when there is a configured SSL VPN endpoint. This affects Citrix ADC and Citrix Gateway 13.0-58.30 and later releases before the CTX276688 update...

6.5CVSS5.8AI score0.00578EPSS
SaveExploits0References1
Citrix
Citrix
added 2022/12/25 12:00 a.m.54 views

[NetScaler] SDX reports "Appliance is running in grace" Error

SDX has instance license CNSINSTCCS checked from ADM. And SDX may report error "Appliance is running in grace. System will loose capacity after XYZ hours"...

7.1AI score
SaveExploits0
hivepro
hivepro
added 2022/12/15 1:53 p.m.82 views

Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Patch Tuesday for December tackles two zero-day vulnerabilities, one of which is being actively exploited CVE-2022-44698 and another that was publicly disclosed at the time of release CVE-2022-44710, alo...

2.1AI score0.76267EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2022/12/14 4:40 a.m.84 views

Hackers Actively Exploiting Citrix ADC and Gateway Zero-Day Vulnerability

The U.S. National Security Agency NSA on Tuesday said a threat actor tracked as APT5 has been actively exploiting a zero-day flaw in Citrix Application Delivery Controller ADC and Gateway to take over affected systems. The critical remote code execution vulnerability, identified as CVE-2022-27518...

10CVSS0.5AI score0.99474EPSS
SaveExploits22
Wiz blog
Wiz blog
added 2022/12/13 9:03 p.m.41 views

CVE-2022-27518 exploited in the wild by APT5: everything you need to know

Detect and mitigate CVE-2022-27518, a Citrix ADC and Gateway unauthenticated RCE 0-day exploited in the wild by a nation state actor. Organizations should patch urgently...

9.8CVSS7AI score0.06875EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2022/12/13 5:15 p.m.65 views

CVE-2022-27518

Unauthenticated remote arbitrary code execution...

9.8CVSS7.9AI score0.06875EPSS
SaveIn wildExploits1References2Affected Software1
Citrix
Citrix
added 2022/12/13 12:01 p.m.114 views

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518

A vulnerability has been discovered in Citrix Gateway and Citrix ADC, listed below, that, if exploited, could allow an unauthenticated remote attacker to perform arbitrary code execution on the appliance. CVE-ID| Description| CWE| Affected Products| Pre-conditions ---|---|---|---|---...

9.8CVSS1.5AI score0.06875EPSS
SaveExploits1Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/12/13 12:00 a.m.65 views

Citrix ADC and Citrix Gateway RCE (CTX474995)

The remote Citrix ADC or Citrix Gateway device is version 12.1 before 12.1-65.25, 12.1-FIPS before 12.1-55.296 or 13.0 before 13.0-58.32. It is therefore affected by an unauthentictaed remote code execution vulnerability: - A vulnerability has been discovered in Citrix ADC formerly known as...

9.8CVSS9.6AI score0.06875EPSS
SaveExploits1References2
NCSC
NCSC
added 2022/12/13 12:00 a.m.13 views

Vulnerability fixed in Citrix Gateway and ADC

Citrix has fixed a vulnerability in Citrix Gateway and Citrix ADC. An unauthenticated remote malicious person could exploit the exploit the vulnerability to execute arbitrary code. To do so, rogue network traffic must be sent to the vulnerable system be sent. Gateway and ADC systems are only...

9.8CVSS9.4AI score0.06875EPSS
SaveExploits1
CISA KEV Catalog
CISA KEV Catalog
added 2022/12/13 12:00 a.m.60 views

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

Citrix Application Delivery Controller ADC and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator...

9.8CVSS9.4AI score0.06875EPSS
SaveIn wildExploits1
OSV
OSV
added 2022/12/08 3:25 a.m.12 views

GSD-2022-1008287 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()

iio: adc: at91adc: fix possible memory leak in at91adcallocatetrigger This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/12/08 3:18 a.m.13 views

GSD-2022-1008221 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()

iio: adc: at91adc: fix possible memory leak in at91adcallocatetrigger This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/12/08 3:09 a.m.9 views

GSD-2022-1008142 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()

iio: adc: at91adc: fix possible memory leak in at91adcallocatetrigger This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/12/08 2:27 a.m.10 views

GSD-2022-1007715 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()

iio: adc: at91adc: fix possible memory leak in at91adcallocatetrigger This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.6 views

PT-2022-36542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A potential memory leak issue exists in the at91 adc allocate trigger function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.6 views

PT-2022-35970 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a possible memory leak in the at91 adc allocate trigger function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.7 views

PT-2022-36147 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.5 through v5.15.79 Description: A potential memory leak issue exists in the at91 adc allocate trigger function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.6 views

PT-2022-36145 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue concerns a potential array out of bounds access in the mp2629 adc driver. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.8 and...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:00 a.m.5 views

PT-2022-36476 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: A potential memory leak issue exists in the at91 adc allocate trigger function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder