233 matches found
EUVD-2024-18199
Malicious code in bioql PyPI...
EUVD-2023-24392
Malicious code in bioql PyPI...
EUVD-2025-24850
Malicious code in bioql PyPI...
CVE-2025-20217 Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability
A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to incorrect...
Linux Distros Unpatched Vulnerability : CVE-2022-47929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service...
SUSE CVE-2024-23836
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extrem...
SUSE CVE-2024-32664
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limited buffer overflow. This vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include not use...
CVE-2020-5856
On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web Services AWS may experience a TMM restart...
CVE-2025-20182
A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol processing of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of servi...
CVE-2024-20276
A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this...
Cisco NX-OS Uncontrolled Resource Consumption (CVE-2018-0090)
A vulnerability in management interface access control list ACL configuration of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to bypass configured ACLs on the management interface. This could allow traffic to be forwarded to the NX-OS CPU for processing, leading to...
CVE-2022-20685
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit th...
CVE-2024-9472
The CVE-2024-9472 entry describes a null pointer dereference in Palo Alto Networks PAN-OS on PA-800, PA-3200, PA-5200, and PA-7000 hardware when a Decryption policy is enabled. An unauthenticated attacker can crash PAN-OS by sending specific traffic through the data plane, causing a DoS and event...
CVE-2024-20426
CVE-2024-20426 affects Cisco ASA and Cisco FTD (IKEv2). A vulnerability in IKEv2 input validation could allow an unauthenticated, remote attacker to cause a DoS by sending crafted IKEv2 traffic, potentially causing the device to reload. Cisco advisory states updates addressing the vulnerability h...
CVE-2024-20407
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are no...
CVE-2024-20407
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are no...
CVE-2024-20407
Cisco Firepower Threat Defense (FTD) Software contains a vulnerability in the interaction between the TCP Intercept feature and Snort 3 detection engine that could allow an unauthenticated, remote attacker to bypass configured policies and inject unintended traffic through an affected device. The...
Cisco Firepower Threat Defense Software TCP Snort 3 Detection Engine Bypass Vulnerability
A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies on an affected system. Devices that are configured with Snort 2 are no...
FreeBSD : zeek -- potential DoS vulnerability (fe7031d3-3000-4b43-9fa6-52c2b624b8f9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fe7031d3-3000-4b43-9fa6-52c2b624b8f9 advisory. Tim Wojtulewicz of Corelight reports: Adding to the POP3 hardening in 7.0.2, the parser now simply...
CVE-2024-20436
A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a null pointer dereference when accessin...