Lucene search
+L

1226 matches found

CNVD
CNVD
•added 2021/05/06 12:00 a.m.•8 views

SQL Injection Vulnerability in Cross-border E-commerce Order System of Hualei Information Technology Co.

Founded in 2013, Hualei Information Technology Co., Ltd. is a professional information technology service provider. A SQL injection vulnerability exists in the cross-border e-commerce order system of Hualei Information Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

7.5AI score
SaveExploits0
OSV
OSV
•added 2021/04/23 9:15 p.m.•15 views

CVE-2020-7034

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for...

8.8CVSS6AI score0.02367EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/23 9:15 p.m.•31 views

CVE-2020-7034

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for...

9CVSS0.02367EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/04/23 8:15 p.m.•33 views

CVE-2020-7034 Command injection in Avaya Session Border Controller for Enterprise

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for...

7.2CVSS9.1AI score0.02367EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/23 6:00 a.m.•10 views

CVE-2020-7034

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for...

9CVSS8.5AI score0.02367EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/04/23 12:00 a.m.•22 views

PT-2021-12636 · Avaya · Avaya Session Border Controller For Enterprise

Name of the Vulnerable Software and Affected Versions: Avaya Session Border Controller for Enterprise versions 7.x through 8.1.1.x Description: A command injection issue could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affect...

9CVSS9.1AI score0.02367EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/04/23 12:00 a.m.•22 views

Avaya Session Border Controller for Enterprise 命令注入漏洞

Avaya Session Border Controller for Enterprise is a firewall from the American company Avaya. a flexible, purpose-built enterprise solution-includes a set of standard security features. A command injection vulnerability exists in Avaya Session Border Controller that could allow an authenticated,...

9CVSS8.5AI score0.02367EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/23 12:00 a.m.•7 views

CVE-2020-7034: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Avaya Session Border Controller for Enterprise could allow an authenticated, remote attacker to send specially crafted messages and execute arbitrary commands with the affected system privileges. Affected versions of Avaya Session Border Controller for...

9CVSS6.3AI score0.02367EPSS
SaveExploits0References3
OSV
OSV
•added 2021/04/22 8:15 p.m.•18 views

CVE-2021-0250

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

7.5CVSS7.1AI score0.0102EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/14 4:00 p.m.•8 views

CVE-2021-0226

On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service DoS condition. Continued receipt and processing of this packet will create a sustained Denial of Service DoS condition. This issue...

7.5CVSS5.4AI score0.00876EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/04/13 12:00 a.m.•16 views

The vulnerability of the BGP protocol implementation in the JunOS operating system allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in the JunOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS7.2AI score0.01388EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/03/12 12:15 a.m.•2 views

DEBIAN-CVE-2020-36278

Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...

7.5CVSS7.6AI score0.02871EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/03/11 12:00 a.m.•6 views

PT-2021-4617 · Leptonica +1 · Leptonica +1

Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the findNextBorderPixel function in ccbord.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations:...

7.8CVSS7.7AI score0.02871EPSS
SaveExploits4References49
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•24 views

The vulnerability of the BGP protocol implementation in the NX-OS network operating system in ACI Mode allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in the NX-OS network operating system in ACI Mode is related to errors in processing parameters during the reception of BGP updates. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.6CVSS7.1AI score0.01528EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/02/24 8:15 p.m.•9 views

CVE-2021-1230

A vulnerability with the Border Gateway Protocol BGP for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service DoS condition. This...

7.5CVSS5.8AI score0.01528EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/24 8:15 p.m.•28 views

Race condition

A vulnerability with the Border Gateway Protocol BGP for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service DoS condition. This...

7.1CVSS7.4AI score0.01528EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/02/24 4:00 p.m.•10 views

CVE-2021-1230

A vulnerability with the Border Gateway Protocol BGP for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service DoS condition. This...

8.6CVSS7.3AI score0.01528EPSS
SaveExploits0References2
OSV
OSV
•added 2021/01/15 6:15 p.m.•18 views

CVE-2021-0211

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon RPD service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain...

10CVSS5.8AI score0.01317EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/13 5:00 p.m.•13 views

CVE-2021-0211

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon RPD service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain...

10CVSS5.5AI score0.01317EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•17 views

The vulnerability of the Junos operating system’s BGP protocol allows a attacker to cause a system crash and restart.

The vulnerability of the Junos operating system’s BGP protocol exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown and restart of the device through the routing process of the event management service...

7.8CVSS7.2AI score0.01288EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder