Lucene search
+L

1226 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/20 12:00 a.m.•3 views

CVE-2021-2414: Undefined Security Weakness

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications component: Routing. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

6.8CVSS5.7AI score0.01157EPSS
SaveExploits0References1
OSV
OSV
•added 2021/10/19 7:15 p.m.•17 views

CVE-2021-31374

On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this message will create a sustained Denial of...

7.5CVSS7.1AI score0.0102EPSS
SaveExploits0References1
OSV
OSV
•added 2021/10/19 7:15 p.m.•20 views

CVE-2021-31353

An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP update, causing the routing protocol daemon RPD to crash and restart, leading to a Denial of Service DoS. Continued receipt and processing of...

7.5CVSS5.8AI score0.01167EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/19 7:15 p.m.•16 views

CVE-2021-0297

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...

6.5CVSS5.8AI score0.00733EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•18 views

Oracle Communications 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Communications Session Border Controller that could be...

6.8CVSS5.8AI score0.01157EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/10/19 12:00 a.m.•19 views

Oracle Communications 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Communications Session Border Controller, which can be...

6.8CVSS5.7AI score0.00928EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/10/13 4:00 p.m.•10 views

CVE-2021-31375

An Improper Input Validation vulnerability in routing process daemon RPD of Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI, allows an attacker to send a specific BGP update which may cause RPKI policy-checks to be bypassed...

7.2CVSS6.2AI score0.00802EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/13 4:00 p.m.•9 views

CVE-2021-31374

On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this message will create a sustained Denial of...

7.5CVSS7AI score0.0102EPSS
SaveExploits0References2Affected Software2
attackerkb
attackerkb
•added 2021/10/13 4:00 p.m.•10 views

CVE-2021-31367

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service DoS by sending genuine BGP flowspec packets which cause an FPC heap memory leak. Once having r...

6.5CVSS6.7AI score0.00397EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/10/13 4:00 p.m.•8 views

CVE-2021-0297

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...

6.5CVSS6.6AI score0.00733EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/10/13 12:00 a.m.•20 views

Juniper Networks Junos OS安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability in Juniper Networks Junos OS, which arises from an exception mishandling...

7.5CVSS7.4AI score0.01167EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/10/13 12:00 a.m.•15 views

Juniper Networks Junos OS和Junos OS Evolved 缓冲区错误漏洞

Juniper Networks Junos OS and Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system for the company's hardware devices. Juniper Networks Junos OS is a network operating system for Juniper Networks hardware devices that provides a secur...

7.5CVSS7.3AI score0.0102EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/10/13 12:00 a.m.•18 views

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from an incorrect input validation...

7.2CVSS5.8AI score0.00802EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•14 views

The vulnerability of the implementation of the Resource Public Key Infrastructure (RPKI) function in the Cisco IOS XR operating system allows a perpetrator to cause a failure in the Border Gateway Protocol (BGP) process.

The vulnerability of the Resource Public Key Infrastructure RPKI function in the Cisco IOS XR operating system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause failures in the Border Gateway Protocol BGP process...

6.8CVSS5.5AI score0.00805EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/09/10 2:15 p.m.•13 views

CVE-2021-38338

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References2
NVD
NVD
•added 2021/09/10 2:15 p.m.•28 views

CVE-2021-38338

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS0.00895EPSS
SaveExploits1References2
Prion
Prion
•added 2021/09/10 2:15 p.m.•25 views

Cross site scripting

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

4.3CVSS6.1AI score0.00895EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2021/09/10 1:33 p.m.•11 views

CVE-2021-38338 Border Loading Bar <= 1.0.1 Reflected Cross-Site Scripting

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS6.4AI score0.00895EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/09/10 1:33 p.m.•38 views

CVE-2021-38338 Border Loading Bar <= 1.0.1 Reflected Cross-Site Scripting

The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1...

6.1CVSS6.2AI score0.00895EPSS
SaveExploits1References2
CVE
CVE
•added 2021/09/10 1:33 p.m.•63 views

CVE-2021-38338

The CVE-2021-38338 entry describes a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Border Loading Bar (versions up to 1.0.1). The flaw is in the file ~/titan-framework/iframe-googlefont-preview.php, where the f and t parameters are used insecurely, allowing an attacker to i...

6.1CVSS6.3AI score0.00895EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder