Lucene search
+L

1062 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/26 12:00 a.m.•6 views

CVE-2020-5928: Cross-Site Request Forgery (CSRF)

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, BIG-IP ASM Configuration utility CSRF protection token can be reused multiple times...

3.3CVSS5.7AI score0.00182EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/26 12:00 a.m.•4 views

CVE-2020-5927: Improper Neutralization of Input During Web Page Generation

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting...

6.1CVSS5.7AI score0.00766EPSS
SaveExploits0References2
OSV
OSV
•added 2020/08/25 2:15 p.m.•10 views

DEBIAN-CVE-2020-24242

In Netwide Assembler NASM 2.15rc10, SEGV can be triggered in toktext in asm/preproc.c by accessing READ memory...

5.5CVSS5.6AI score0.00741EPSS
SaveExploits1References1
Mend
Mend
•added 2020/08/25 1:54 p.m.•2 views

CVE-2020-24242

In Netwide Assembler NASM 2.15rc10, SEGV can be triggered in toktext in asm/preproc.c by accessing READ memory...

6.8CVSS0.00741EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2020/08/25 1:54 p.m.•51 views

CVE-2020-24242

In Netwide Assembler NASM 2.15rc10, SEGV can be triggered in toktext in asm/preproc.c by accessing READ memory...

5.5CVSS5.4AI score0.00741EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/25 12:00 a.m.•8 views

CVE-2020-24242: Undefined Security Weakness

In Netwide Assembler NASM 2.15rc10, SEGV can be triggered in toktext in asm/preproc.c by accessing READ memory...

5.5CVSS5.7AI score0.00741EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/08/25 12:00 a.m.•4 views

PT-2020-15671

Name of the Vulnerable Software and Affected Versions Netwide Assembler NASM version 2.15rc10 Description The issue can cause a SEGV in the tok text function located in asm/preproc.c when accessing READ memory. Recommendations For Netwide Assembler NASM version 2.15rc10, consider avoiding the use...

5.5CVSS0.00741EPSS
SaveExploits1References9
Kitploit
Kitploit
•added 2020/06/24 9:30 p.m.•339 views

Sifter 7.4 - OSINT, Recon & Vulnerability Scanner

Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit...

7.8CVSS7.5AI score0.07605EPSS
SaveExploits5References7
OSV
OSV
•added 2020/04/30 9:15 p.m.•17 views

CVE-2020-5879

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

7.5CVSS7.1AI score0.00812EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/30 9:15 p.m.•30 views

CVE-2020-5879

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

7.5CVSS7.5AI score0.00812EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/04/30 9:15 p.m.•5 views

CVE-2020-5879

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

7.5CVSS7.4AI score0.00812EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/30 9:15 p.m.•29 views

Design/Logic Flaw

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

4.3CVSS7.4AI score0.00812EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/30 8:46 p.m.•77 views

CVE-2020-5879

CVE-2020-5879 affects BIG-IP ASM 11.6.1–11.6.5.1, where under certain configurations the appliance sends data plane traffic to back-end servers unencrypted despite a Server SSL profile being applied. The issue is documented in F5 advisory K88474783, which notes that vulnerable releases include 11...

7.5CVSS7.4AI score0.00812EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/30 8:46 p.m.•42 views

CVE-2020-5879

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

7.5AI score0.00812EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/30 12:00 a.m.•2 views

PT-2020-18780

Name of the Vulnerable Software and Affected Versions F5 BIG-IP ASM versions 11.6.1 through 11.6.5.1 Description The issue occurs when the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied, under certain configurations. Recommendatio...

7.5CVSS0.00812EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/30 12:00 a.m.•6 views

CVE-2020-5879: Cleartext Transmission of Sensitive Information

On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied...

7.5CVSS7.3AI score0.00812EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/03/31 12:00 a.m.•45 views

F5 Networks BIG-IP : ImageMagick vulnerability (K03512441)

ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. CVE-2019-13136 Impact BIG-IP AAM,Edge Gateway, WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned.If exploited, this vulnerability may result ...

7.8CVSS7.1AI score0.01457EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/03/31 12:00 a.m.•48 views

F5 Networks BIG-IP : ImageMagick vulnerability (K20336394)

ImageMagick before 7.0.8-50 has a 'use of uninitialized value' vulnerability in the function ReadCUTImage in coders/cut.c. CVE-2019-13135 Impact BIG-IP AAM,Edge Gateway, and WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned. If exploited, this vulnerabilitymay...

8.8CVSS7.1AI score0.03276EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2020/03/11 11:33 a.m.•92 views

Sifter - A OSINT, Recon And Vulnerability Scanner

Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit...

7.2AI score
SaveExploits0References2
Prion
Prion
•added 2020/01/06 6:15 a.m.•28 views

Heap overflow

In Netwide Assembler NASM 2.15rc0, a heap-based buffer over-read occurs via a crafted .asm file in settextfree when called from expandonesmacro in asm/preproc.c...

5.8CVSS6.9AI score0.00837EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder