1116 matches found
CVE-2025-20339
Cisco SD-WAN vEdge Software is affected by CVE-2025-20339, which stems from improper enforcement of the implicit deny at the end of an ACL, allowing unauthenticated remote attackers to bypass configured IPv4 ACLs. The vulnerability affects the ACL processing of IPv4 packets and could let unauthor...
PT-2025-39290
Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vEdge Software affected versions not specified Description A flaw exists in how IPv4 packet access control lists ACLs are handled, potentially allowing a remote, unauthenticated attacker to circumvent configured ACLs. This is caus...
Linux Distros Unpatched Vulnerability : CVE-2023-1296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload's variables. Fixed in 1.4.6 and 1.5.1...
CVE-2025-53805
Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
PT-2025-36856
Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The Windows Connected Devices Platform Service contains a race condition due to improper synchronization during concurrent execution using a shared...
CLSA-2025-1757076749 Fix CVE(s): CVE-2025-54574
SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...
CLSA-2025-1757076677 Fix CVE(s): CVE-2025-54574
SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574...
Simple Steps for Attack Surface Reduction
Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you choose on day one. In this piece, Yuriy Tsibere explores how default policies like deny-by-default, MFA enforcement, and application Ringfencin...
Linux Distros Unpatched Vulnerability : CVE-2021-36213
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action cancels out, causing th...
Linux Distros Unpatched Vulnerability : CVE-2021-39514
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU located in aclosslessscan.cpp...
Linux Distros Unpatched Vulnerability : CVE-2018-12550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Eclipse Mosquitto version 1.0 to 1.5.5 inclusive is configured to use an ACL file, and that ACL file is empty, or contains only comments or blank lines, th...
Tenda AC6 formSetMacFilterCfg function buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the macFilterType and deviceLi...
Linux Distros Unpatched Vulnerability : CVE-2016-9850
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detection of the username in the rule due to...
Linux Distros Unpatched Vulnerability : CVE-2017-5846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gstasfdemuxprocessextstreamprops function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a...
Linux Distros Unpatched Vulnerability : CVE-2015-1419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to denyfile parsing...
Linux Distros Unpatched Vulnerability : CVE-2019-12291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by ...
Linux Distros Unpatched Vulnerability : CVE-2019-13031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LemonLDAP::NG before 1.9.20 has an XML External Entity XXE issue when submitting a notification to the notification server. By default, the notification server ...
CVE-2025-55028 JavaScript alerts could impede UI interaction or allow denial of service attacks
Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142...
