Lucene search
+L

3616 matches found

Prion
Prion
added 2021/12/01 4:15 p.m.26 views

Denial of service

Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120ENCPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU,...

7.8CVSS7.5AI score0.03077EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.8 views

The vulnerability of the implementation of the Ethernet Industrial Protocol (ENIP) in Cisco Firepower Threat Defense (FTD) software allows a attacker to circumvent security restrictions.

The vulnerability of the Ethernet Industrial Protocol ENIP implementation of Cisco Firepower Threat Defense FTD’s micro-programmed network interface controllers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restriction...

5.8CVSS7.2AI score0.00999EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/30 12:00 a.m.17 views

PT-2021-5339 · Mitsubishi · Melipc Series +3

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R Series R00/01/02CPU versions 24 and prior MELSEC iQ-R Series R04/08/16/32/120ENCPU versions 57 and prior MELSEC iQ-R Series R08/16/32/120SFCPU versions 28 and prior MELSEC iQ-R Series R08/16/32/120PCPU versions 29 and prior MELSEC...

7.8CVSS7.3AI score0.03077EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2021/11/18 7:15 p.m.7 views

CVE-2021-39920

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file...

7.5CVSS6.9AI score0.03158EPSS
SaveExploits1References10Affected Software1
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.6 views

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that stems from...

7.5CVSS7.8AI score0.03545EPSS
SaveExploits1References16
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.5 views

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that can be exploited by...

7.5CVSS7.8AI score0.07885EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.6 views

Wireshark 安全漏洞

Wireshark is a network packet analysis software from Wireshark team. A denial of service vulnerability exists in Wireshark, which stems from an infinite loop in the Bluetooth DHT parser. An attacker could use this vulnerability to send carefully crafted packets through the application, consuming...

7.5CVSS7.7AI score0.04928EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.5 views

Wireshark 代码问题漏洞

Wireshark is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Wireshark suffers from an input validation error vulnerability that stems from insufficient validation in the Modbu...

7.5CVSS7.8AI score0.03239EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.8 views

Wireshark 代码问题漏洞

Wireshark is a network packet analysis software. Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card.A null pointer dereference vulnerability exists in the IPPUSB parser in Wireshark versions 3.4.0 - 3.4.9. An attacker could exploit this vulnerability to...

7.5CVSS7.8AI score0.03158EPSS
SaveExploits1References15
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.5 views

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that exists due to...

7.5CVSS7.8AI score0.07564EPSS
SaveExploits1References15
CNNVD
CNNVD
added 2021/11/17 12:00 a.m.4 views

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that can be exploited by...

7.5CVSS7.8AI score0.05178EPSS
SaveExploits1References17
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:00 a.m.15 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...

6.8CVSS6.5AI score0.01187EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/12 12:00 a.m.17 views

The vulnerability of the SSL/TLS message processor in microprogramming network devices from Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failures.

The vulnerability of SSL/TLS message processors in microprogramming network interface devices from Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense involves an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to caus...

8.6CVSS7.4AI score0.01531EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.12 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Small Business 220 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business 220 router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

8.8CVSS8.4AI score0.00521EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:00 a.m.10 views

The vulnerability of the Wi-Fi Aruba Instant deployment application, related to the operation that occurs outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Wi-Fi Aruba Instant deployment application relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to port 8211, using the Protocol Applicatio...

10CVSS8.5AI score0.02409EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/02 12:00 a.m.9 views

PT-2021-7229 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers affected versions not specified Description: A vulnerability in the Application Visibility and Control AVC-FNF feature could allow an unauthenticated, remote attacker t...

8.6CVSS8.4AI score0.01472EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/10/29 12:00 a.m.23 views

Office Server Document Converter 缓冲区错误漏洞

Antenna House Office Server Document Converter Osdc is an office server document converter from Antenna House USA. It is used to batch convert Word, Excel, and Powerpoint into high-quality Pdf or image formats that are easy to share and look accurate on any screen. A buffer error vulnerability...

9.8CVSS9.1AI score0.02073EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/27 12:00 a.m.7 views

Cisco Products Snort 安全漏洞

Cisco Products Snort is a Snort engine for Cisco Products from Cisco USA. A security vulnerability exists in Cisco Products Snort that results from improper handling of Block with Reset or Interactive Block with Reset operations when configuring rules without proper constraints. An attacker can...

8.6CVSS7.3AI score0.01391EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/10/27 12:00 a.m.10 views

Cisco Firepower Threat Defense 资源管理错误漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A resource management error vulnerability exists in Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software SSL/TLS Denial, which...

8.6CVSS7.3AI score0.01531EPSS
SaveExploits0References6
OSV
OSV
added 2021/10/25 10:15 p.m.23 views

ALPINE-CVE-2021-41105

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

7.5CVSS7AI score0.02521EPSS
SaveExploits3References1
Rows per page
Query Builder