3617 matches found
Fortinet FortiOS IPS Engine Security Vulnerability
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering, and antispam security features. A security vulnerability exists in the...
PT-2023-6002 · Fortinet · Fortiproxy +1
Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.0.0 through 7.0.10 FortiOS versions 7.2.0 through 7.2.4 FortiProxy versions 7.0.0 through 7.0.8 FortiProxy versions 7.2.0 through 7.2.2 Description: A use after free vulnerability in FortiOS and FortiProxy may allow an...
PT-2023-6016 · Fortinet · Fortinet Ips Engine +1
Name of the Vulnerable Software and Affected Versions: Fortinet IPS Engine versions 6.158, 7.166, 7.321 Description: The issue is related to an interpretation conflict in the Fortinet IPS Engine, which can be exploited by an attacker to evade IPS features. This can be achieved via crafted TCP...
Fortinet Fortigate Webproxy process DoS (FG-IR-23-184)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-184 advisory. - A use after free vulnerability CWE-416 in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiPro...
CVE-2023-5366
A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...
Schneider Electric EcoStruxure Power Monitoring Expert Code Issue Vulnerability
The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France that is used to perform power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from a code issue vulnerability that originates from...
MGASA-2023-0275 Updated wireshark packages fix security vulnerabilities
The updated wireshark packages fix security vulnerabilities: Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack. CVE-2023-2906 BT SDP dissector...
CVE-2023-20227
A vulnerability in the Layer 2 Tunneling Protocol L2TP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain L2TP packets. An attacker could explo...
Design/Logic Flaw
A vulnerability in the Layer 2 Tunneling Protocol L2TP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain L2TP packets. An attacker could explo...
Authentication Bypass
Sing is vulnerable to an authentication bypass vulnerability. The vulnerability is due to SOCKS5 inbound user authentication which allows an attacker to bypass authentication by using specially crafted packets...
CVE-2023-43771
In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program...
Code injection
In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program...
CVE-2023-43771
In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program...
CVE-2023-43771
In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program...
CVE-2023-43771
In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program...
Attacks on 5G Infrastructure From Users’ Devices
Crafted packets from cellular devices such as mobile phones can exploit faulty state machines in the 5G core to attack cellular infrastructure. Smart devices that critical industries such as defense, utilities, and the medical sectors use for their daily operations depend on the speed, efficiency...
CVE-2023-2071
Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets. The device has the functionality, through a CIP class, to execute exported functions...
Rockwell Automation PanelView Plus 代码问题漏洞
Rockwell Automation PanelView Plus is a family of Human Machine Interface HMI products from Rockwell Automation. These HMI devices are designed to integrate with industrial automation systems to provide operators with an intuitive interface for controlling and monitoring production...
PT-2023-5291 · Rockwell Automation · Factorytalk View Machine Edition
Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk View Machine Edition affected versions not specified Description: The issue arises from improper verification of user input, allowing an unauthenticated attacker to achieve remote code execution via crafted...
PT-2023-5502 · Nvidia · Nvidia Cumulus Linux
Name of the Vulnerable Software and Affected Versions: NVIDIA Cumulus Linux affected versions not specified Description: The issue is related to a vulnerability in the neighmgrd and nlmanager components of NVIDIA Cumulus Linux. An attacker on an adjacent network may cause an uncaught exception by...