Lucene search
+L

110 matches found

NVD
NVD
•added 2026/10/14 5:17 p.m.•8 views

CVE-2026-102047

An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent t...

7.1CVSS0.00269EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/14 4:53 p.m.•37 views

CVE-2026-102047 Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used

An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent t...

7.1CVSS0.00269EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 4:53 p.m.•12 views

CVE-2026-102047

Juniper Networks Junos OS and Junos OS Evolved are affected by an Improper Validation of Consistency within Input vulnerability in the l2cpd process. An adjacent unauthenticated Layer 2 attacker can cause a denial of service in associated Layer 2 control protocols by sending a crafted MVRP Ethern...

7.1CVSS5.8AI score0.00269EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 4:53 p.m.•9 views

EUVD-2026-101371

An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent t...

7.1CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•5 views

CVE-2026-102047: Improper Validation of Consistency within Input

An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent t...

7.1CVSS5.8AI score0.00269EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/07/29 5:49 p.m.•90 views

Exploit for CVE-2026-52134

CVE-2026-52134: GOOSE replay and message-freshness handling in...

6.2AI score0.008EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2026/07/01 3:19 a.m.•25 views

SUSE CVE-2026-53074

In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpfprogtestrunskb bpfprogtestrunskb calls ethtypetrans first and then uses skb-protocol to initialize sk family and address fields for the test run. For IPv4 and IPv6 packets, it may access...

5.1CVSS5.7AI score0.00114EPSS
SaveExploits0References17
EUVD
EUVD
•added 2026/06/24 4:30 p.m.•27 views

EUVD-2026-38942

In the Linux kernel, the following vulnerability has been resolved: bpf: reject short IPv4/IPv6 inputs in bpfprogtestrunskb bpfprogtestrunskb calls ethtypetrans first and then uses skb-protocol to initialize sk family and address fields for the test run. For IPv4 and IPv6 packets, it may access...

5.7AI score0.00114EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/06/24 12:00 a.m.•34 views

PT-2026-51897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PPPoE driver where the generic PPP layer function ppp input accepts Protocol Field Compression PFC frames, despite PFC not being recommended for PPPoE. If an...

9.1CVSS5.8AI score0.00716EPSS
SaveExploits0
CVE
CVE
•added 2026/06/09 10:49 p.m.•78 views

CVE-2026-46433

CVE-2026-46433 affects lldpd (LLDP implementation). Prior to version 1.0.22, lldpd_decode() incorrectly shifts frame payload when removing 802.1Q VLAN tags, using a length calculation that causes a 4-byte heap OOB read if the frame size equals the interface MTU. This vulnerability is fixed in ver...

6.5CVSS6AI score0.0037EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/05/06 12:30 p.m.•22 views

EUVD-2026-27597

In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in xdpumemreg could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore ...

6.5AI score0.00135EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/05/06 7:40 a.m.•18 views

CVE-2026-43093

In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in xdpumemreg could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore ...

7.8CVSS6.5AI score0.00135EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2026/05/06 7:40 a.m.•69 views

CVE-2026-43093

CVE-2026-43093 is a Linux kernel issue in the xsk (AF_XDP) subsystem where headroom validation for UMEM was tightened in xdp_umem_reg(), addressing potential memory corruption of skb_shared_info and insufficient space for minimum-sized Ethernet frames. The fix accounts for 128-byte alignment as a...

7.8CVSS6.5AI score0.00135EPSS
SaveExploits0References9Affected Software1
osv_cve
osv_cve
•added 2026/05/06 7:40 a.m.•21 views

CVE-2026-43093 xsk: tighten UMEM headroom validation to account for tailroom and min frame

In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom validation in xdpumemreg could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore ...

7.8CVSS5.8AI score
SaveExploits0References12
attackerkb
attackerkb
•added 2026/02/25 4:26 p.m.•16 views

CVE-2026-20033

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker cou...

7.4CVSS5.5AI score0.00173EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/25 12:00 a.m.•14 views

CVE-2026-20033: Buffer Access with Incorrect Length Value

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker cou...

7.4CVSS5.8AI score0.00173EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/16 7:15 a.m.•24 views

CVE-2025-55090

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in nxipv4packetreceive function when received an Ethernet frame with less than 4 bytes of IP packet...

6.9CVSS0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/16 6:43 a.m.•15 views

CVE-2025-55090 Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in nxipv4packetreceive function when received an Ethernet frame with less than 4 bytes of IP packet...

6.9CVSS5.9AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/16 6:43 a.m.•35 views

CVE-2025-55090

In NetX Duo (Eclipse ThreadX) before version 6.4.4, there is a potential out-of-bounds read in the IPv4 packet path. Specifically, the _nx_ipv4_packet_receive() function can read outside the IP payload when an Ethernet frame is received that contains less than 4 bytes of IP data. This vulnerabili...

6.9CVSS5.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/16 12:00 a.m.•4 views

PT-2025-42439

Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4 Description The networking support module for Eclipse Foundation ThreadX contains a potential out-of-bounds read issue. This issue occurs in the nx ip packet receive function when processing an Ethernet frame...

6.9CVSS5.8AI score0.00369EPSS
SaveExploits0References8
Rows per page
Query Builder