Lucene search
+L

3729 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/11 12:00 a.m.11 views

The software for connecting to remote QVPN Device Clients for Windows is vulnerable, allowing a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for connecting to remote QVPN Device Clients for Windows is related to insufficient protection for registration data. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information...

6.7CVSS5.5AI score0.00154EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/10/11 12:00 a.m.62 views

Debian DSA-5525-1 : samba - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5525 advisory. - A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba...

9.8CVSS7.1AI score0.02409EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2023/10/10 12:00 a.m.14 views

Microsoft Win32K Security Vulnerability

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Windows Win32K. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected: Windows Server 2012 R2,Windows...

7.8CVSS6.6AI score0.00807EPSS
SaveExploits0References4
Amazon
Amazon
added 2023/10/05 12:00 a.m.51 views

Medium: freerdp

Issue Overview: FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. This issue affects Clients only. Integer underflow leading to DOS e.g. abort due to WINPRASSERT with default compilation flags. When an insufficient blockLen is provided, and...

9.8CVSS7AI score0.01809EPSS
SaveExploits11
OSV
OSV
added 2023/10/04 11:00 a.m.14 views

USN-6401-1 freerdp2 vulnerabilities

It was discovered that FreeRDP did not properly manage certain inputs. A malicious server could use this issue to cause FreeRDP clients to crash, resulting in a denial of service, or possibly obtain sensitive information. CVE-2023-39350, CVE-2023-39351, CVE-2023-39353, CVE-2023-39354,...

9.8CVSS6.9AI score0.01694EPSS
SaveExploits10References11
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.12 views

The vulnerability of the network software product BIG-IP Access Policy Manager Clients (APM Clients), a control device for access control and remote authentication, stems from the transmission of data in an open manner. This vulnerability allows attackers to execute attacks like TunnelCrack.

The vulnerability of the BIG-IP Access Policy Manager Clients APM Clients, a network software solution for access control and remote authentication, lies in the open transmission of data. Exploiting this vulnerability allows an attacker to execute the TunnelCrack attack by controlling the DNS...

6.8CVSS7.6AI score0.00237EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.14 views

The vulnerability of the network software product BIG-IP Access Policy Manager Clients (APM Clients), a control device for access control and remote authentication, stems from the transmission of data in an open manner. This vulnerability allows attackers to execute attacks like TunnelCrack.

The vulnerability of the network software product BIG-IP Access Policy Manager Clients APM Clients is related to the transmission of data in an open manner. Exploiting this vulnerability allows a malicious actor to execute the TunnelCrack attack by redirecting traffic...

6.8CVSS7.1AI score0.00154EPSS
SaveExploits0References3Affected Software2
The Coalfire Blog
The Coalfire Blog
added 2023/09/28 7:14 p.m.22 views

Guardians of IoT: Safeguarding connectivity of input and output channels

Ensuring the security of the Internet of Things IoT demands a meticulous examination of industry-specific vulnerabilities and a profound comprehension of data handling. Have you taken the necessary steps to confirm that your chosen third-party security vendor possesses a comprehensive understandi...

7AI score
SaveExploits0
NVD
NVD
added 2023/09/28 2:15 p.m.18 views

CVE-2023-5215

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbdgetsize function...

6.5CVSS5.6AI score0.00746EPSS
SaveExploits1References4
Prion
Prion
added 2023/09/28 2:15 p.m.23 views

Design/Logic Flaw

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbdgetsize function...

3.3CVSS9.2AI score0.00746EPSS
SaveExploits1References3Affected Software2
AlpineLinux
AlpineLinux
added 2023/09/28 1:55 p.m.128 views

CVE-2023-5215

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbdgetsize function...

6.5CVSS6AI score0.00746EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2023/09/28 1:55 p.m.85 views

CVE-2023-5215

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbdgetsize function...

6.5CVSS5.7AI score0.00746EPSS
SaveExploits1
OSV
OSV
added 2023/09/28 1:55 p.m.22 views

CVE-2023-5215 Libnbd: crash or misbehaviour when nbd server returns an unexpected block size

A flaw was found in libnbd. A server can reply with a block size larger than 2^63 the NBD spec states the size is a 64-bit unsigned value. This issue could lead to an application crash or other unintended behavior for NBD clients that doesn't treat the return value of the nbdgetsize function...

5.3CVSS6.5AI score
SaveExploits0References7
OSV
OSV
added 2023/09/27 4:21 p.m.15 views

CVE-2023-43125

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.2CVSS5.8AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/27 4:21 p.m.34 views

CVE-2023-43125

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.2CVSS7.4AI score0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/09/27 3:22 p.m.24 views

CVE-2023-43125 BIG-IP APM Clients TunnelCrack vulnerability

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

6.8CVSS6.9AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/27 3:21 p.m.43 views

CVE-2023-43124 BIG-IP APM Clients TunnelCrack vulnerability

BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

5.3CVSS7.1AI score0.00154EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:00 a.m.35 views

F5 Networks BIG-IP : BIG-IP APM Clients TunnelCrack vulnerability (K000136907)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000136907 advisory. - BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of...

7.1CVSS7.1AI score0.00154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:00 a.m.27 views

F5 Networks BIG-IP : BIG-IP APM Clients TunnelCrack vulnerability (K000136909)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.3 / 16.1.4.2 / 17.1.1.1. It is, therefore, affected by a vulnerability as referenced in the K000136909 advisory. BIG-IP APM clients may send IP traffic outside of the VPN tunnel.CVE-2023-43125 Tenable has extracted...

8.2CVSS7.8AI score0.00237EPSS
SaveExploits0References2
Fedora
Fedora
added 2023/09/21 12:16 a.m.79 views

[SECURITY] Fedora 39 Update: freerdp-2.11.1-1.fc39

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

9.8CVSS7.5AI score0.01809EPSS
SaveExploits12
Rows per page
Query Builder