Lucene search
+L

2248 matches found

NVD
NVD
•added 2021/01/12 8:15 p.m.•30 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2
OSV
OSV
•added 2021/01/12 8:15 p.m.•8 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/01/12 8:15 p.m.•10 views

CVE-2021-1676

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS6.3AI score0.01321EPSS
SaveExploits0References3Affected Software26
Cvelist
Cvelist
•added 2021/01/12 7:42 p.m.•41 views

CVE-2021-1676 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

5.5CVSS7.1AI score0.01321EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/12 7:42 p.m.•136 views

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References2Affected Software8
Microsoft CVE
Microsoft CVE
•added 2021/01/12 8:00 a.m.•61 views

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability

...

5.5CVSS5.7AI score0.01321EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/12 12:00 a.m.•4 views

CVE-2021-1676: Undefined Security Weakness

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability...

5.5CVSS7.4AI score0.01321EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/01/12 12:00 a.m.•25 views

Microsoft NT LAN Manager 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows/Windows Server NT Lan Manager Datagra...

5.5CVSS6.6AI score0.01321EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/01/12 12:00 a.m.•187 views

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

9.8CVSS7.2AI score0.10031EPSS
SaveExploits3References56
Positive Technologies
Positive Technologies
•added 2021/01/09 12:00 a.m.•26 views

PT-2021-7683 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A remote denial of service issue was found in the Linux kernel's TIPC kernel module. The tipc link xmit function hits an unknown state while attempting to parse SKBs that are not in th...

9.8CVSS6.4AI score0.93838EPSS
SaveExploits109References698
NCSC
NCSC
•added 2021/01/05 12:00 a.m.•59 views

Fixed an issue in Citrix ADC and Citrix Gateway

Citrix has fixed an issue in ADC and Gateway which can lead to denial-of-service attacks. A malicious party could potentially potentially misuse DTLS to cause a Denial-of-Service. Abuse can only occur when DTLS is enabled. Citrix reports that limited scale attacks are currently being reported whi...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/31 12:00 a.m.•14 views

MatrixSSL Invalid Pointer Release Vulnerability

MatrixSSL is an embedded, open source SSLv3 stack designed for small applications and devices. An invalid pointer release vulnerability exists in the DTLS server in versions prior to MatrixSSL 4.2.2 Open. An attacker could exploit this vulnerability via specially crafted incoming network messages...

7.5CVSS6.9AI score0.01795EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2020/12/30 12:00 a.m.•20 views

Inside Secure MatrixSSL 缓冲区错误漏洞

MatrixSSL is an embedded, open source SSLv3 stack designed for small applications and devices. An invalid pointer release vulnerability exists in the DTLS server in versions prior to MatrixSSL 4.2.2 Open. An attacker could exploit this vulnerability via specially crafted incoming network messages...

7.5CVSS5.8AI score0.01795EPSS
SaveExploits1References3
The Hacker News
The Hacker News
•added 2020/12/25 6:22 a.m.•11 views

Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller ADC devices that attackers are abusing to launch amplified distributed denial-of-service DDoS attacks against several targets. "An attacker or bots can overwhe...

6AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2020/12/25 6:22 a.m.•95 views

Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks

Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller ADC devices that attackers are abusing to launch amplified distributed denial-of-service DDoS attacks against several targets. "An attacker or bots can overwhe...

0.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2020/12/15 9:57 a.m.•33 views

CVE-2020-35471

A NULL pointer dereference vulnerability was found in Envoy. During the handling of truncated or dropped UDP datagrams, this flaw allows an attacker to specify the length of the packet to be larger than 1500 bytes and cause the envoy proxy process to segfault, resulting in a denial of service. Th...

7.5CVSS7.2AI score0.02393EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/12/15 12:48 a.m.•37 views

CVE-2020-35471

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

7.6AI score0.02393EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/12/15 12:00 a.m.•12 views

PT-2020-17337 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.16.1 Description: The issue is related to the mishandling of dropped and truncated datagrams, which can cause a segmentation fault when a UDP packet size exceeds 1500. Recommendations: For Envoy versions prior to...

7.5CVSS7.3AI score0.02393EPSS
SaveExploits1References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/15 12:00 a.m.•4 views

CVE-2020-35471: Undefined Security Weakness

Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500...

7.5CVSS5.8AI score0.02393EPSS
SaveExploits1References1
OSV
OSV
•added 2020/11/17 2:15 a.m.•33 views

UBUNTU-CVE-2020-25705

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Bas...

7.4CVSS6.8AI score0.06692EPSS
SaveExploits1References8
Rows per page
Query Builder