Lucene search
+L

1129 matches found

OSV
OSV
added 2021/10/19 7:15 p.m.7 views

CVE-2021-0297

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...

6.5CVSS5.8AI score0.00709EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/19 7:15 p.m.8 views

CVE-2021-31353

An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP update, causing the routing protocol daemon RPD to crash and restart, leading to a Denial of Service DoS. Continued receipt and processing of...

7.5CVSS5.8AI score0.01129EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.11 views

Oracle Communications 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Communications Session Border Controller, which can be...

6.8CVSS5.7AI score0.00898EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.9 views

Oracle Communications 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Communications Session Border Controller that could be...

6.8CVSS5.8AI score0.0112EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:0 p.m.4 views

CVE-2021-0297

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...

6.5CVSS6.6AI score0.00709EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:0 p.m.5 views

CVE-2021-31367

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service DoS by sending genuine BGP flowspec packets which cause an FPC heap memory leak. Once having r...

6.5CVSS6.7AI score0.00385EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:0 p.m.4 views

CVE-2021-31375

An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI, allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed...

7.2CVSS6.2AI score0.00776EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:0 p.m.5 views

CVE-2021-31374

On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this message will create a sustained Denial of...

7.5CVSS7AI score0.00987EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2021/10/13 12:0 a.m.9 views

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from an incorrect input validation...

7.2CVSS5.8AI score0.00776EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/13 12:0 a.m.9 views

Juniper Networks Junos OS安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability in Juniper Networks Junos OS, which arises from an exception mishandling...

7.5CVSS7.4AI score0.01129EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/10/13 12:0 a.m.9 views

Juniper Networks Junos OS和Junos OS Evolved 缓冲区错误漏洞

Juniper Networks Junos OS and Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system for the company's hardware devices. Juniper Networks Junos OS is a network operating system for Juniper Networks hardware devices that provides a secur...

7.5CVSS7.3AI score0.00987EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.9 views

The vulnerability of the implementation of the Resource Public Key Infrastructure (RPKI) function in the Cisco IOS XR operating system allows a perpetrator to cause a failure in the Border Gateway Protocol (BGP) process.

The vulnerability of the Resource Public Key Infrastructure RPKI function in the Cisco IOS XR operating system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause failures in the Border Gateway Protocol BGP process...

6.8CVSS5.5AI score0.00772EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2021/09/10 2:15 p.m.20 views

CVE-2021-38338

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS0.00895EPSS
SaveExploits1References2
OSV
OSV
added 2021/09/10 2:15 p.m.6 views

CVE-2021-38338

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References2
Prion
Prion
added 2021/09/10 2:15 p.m.15 views

Cross site scripting

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

4.3CVSS6.1AI score0.00895EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/09/10 1:33 p.m.5 views

CVE-2021-38338 Border Loading Bar <= 1.0.1 Reflected Cross-Site Scripting

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS6.4AI score0.00895EPSS
SaveExploits1References2
CVE
CVE
added 2021/09/10 1:33 p.m.49 views

CVE-2021-38338

The CVE-2021-38338 entry describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Border Loading Bar (versions up to 1.0.1). The flaw is in the file ~/titan-framework/iframe-googlefont-preview.php, where the f and t parameters are used insecurely, allowing an attacker to i...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/09/10 1:33 p.m.29 views

CVE-2021-38338 Border Loading Bar <= 1.0.1 Reflected Cross-Site Scripting

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS6.2AI score0.00895EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.6 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the WordPress plugin Border Loading Bar, which stems from the fact th...

6.1CVSS6.1AI score0.00895EPSS
SaveExploits1References3
WPVulnDB
WPVulnDB
added 2021/09/09 12:0 a.m.14 views

Border Loading Bar <= 1.0.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.8AI score0.00895EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder