Lucene search
+L

7519 matches found

Prion
Prion
•added 2021/03/26 9:15 p.m.•21 views

Code injection

In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure4 device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a...

5CVSS5.2AI score0.00737EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/03/26 8:55 p.m.•39 views

CVE-2020-7464

In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure4 device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a...

5.2AI score0.00737EPSS
SaveExploits0References1
CVE
CVE
•added 2021/03/26 8:55 p.m.•126 views

CVE-2020-7464

The CVE-2020-7464 issue affects the ure(4) USB Ethernet driver in FreeBSD (Realtek RTL8152/8153). A programming error can cause large frames (>2048 bytes) to be misreported as 2048 bytes, enabling an attacker to reinterpret part of a large packet as a separate packet and inject packets across ...

5.3CVSS5.2AI score0.00737EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/03/26 12:00 a.m.•17 views

Linux kernel 安全漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Etherne...

5.5CVSS8.3AI score0.00272EPSS
SaveExploits0References17
Cvelist
Cvelist
•added 2021/03/24 3:23 p.m.•42 views

CVE-2020-36283

HID OMNIKEY 5427 and OMNIKEY 5127 readers are vulnerable to CSRF when using the EEM driver Ethernet Emulation Mode. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request to upload a configuration file to the device. An attacker...

9.6CVSS8.8AI score0.00727EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/12 12:00 a.m.•11 views

M-System Giken Co M-System DL8 安全漏洞

M-System Giken Co The M-System DL8 is an Ethernet adapter from Japan M-System Giken Co. Provides types designed to connect DL8 and R8 series modules. A security vulnerability exists in the M-System Giken Co M-System DL8 that can be exploited by an unauthorized attacker to perform a DoS attack...

6.8CVSS6.5AI score0.01333EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/03/12 12:00 a.m.•15 views

M-System Giken Co M-System DL8 安全漏洞

M-System Giken Co The M-System DL8 is an Ethernet adapter from Japan M-System Giken Co. Provides types designed to connect DL8 and R8 series modules. A security vulnerability exists in the M-System Giken Co M-System DL8, which can be exploited by an unauthorized attacker to perform an operation...

4.3CVSS5.8AI score0.00769EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/03/10 12:00 a.m.•57 views

Unspecified Vulnerability in Intel Ethernet I210 Controller (CNVD-2021-17786)

The Intel Ethernet I210 Controller is a hardware device from Intel Corporation USA. Providing a complete network protocol stack provides the basis for enabling small groups of computers in the same LAN as well as WANs connected via routing protocols. A security vulnerability exists in the Intel...

4.4CVSS6.5AI score0.00249EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/03/10 12:00 a.m.•47 views

Intel Ethernet I210 Controller Access Control Error Vulnerability (CNVD-2021-17787)

The Intel Ethernet I210 Controller is a hardware device from Intel Corporation USA. Providing a complete network protocol stack provides the basis for enabling small groups of computers in the same LAN as well as WANs connected via routing protocols. An Access Control Error vulnerability exists i...

4.4CVSS6.4AI score0.00267EPSS
SaveExploits0References1
NCSC
NCSC
•added 2021/03/05 12:00 a.m.•13 views

Vulnerability fixed in Snort

A vulnerability has been fixed in Snort. The vulnerability allows an unauthenticated malicious party to cause a denial-of-service denial-of-service. The malicious party should be able to send rogue send Ethernet frames to a device that then then handles them. Cisco indicates that the...

7.4CVSS6.7AI score0.02872EPSS
SaveExploits0
Cisco
Cisco
•added 2021/03/03 4:00 p.m.•112 views

Multiple Cisco Products Snort Ethernet Frame Decoder Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of error conditions when processing...

7.4CVSS7.5AI score0.02872EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•15 views

PT-2021-2259 · Cisco · Snort

Name of the Vulnerable Software and Affected Versions: Cisco products affected versions not specified Description: The issue is related to improper handling of error conditions when processing Ethernet frames in the Snort detection engine, which could allow an unauthenticated, adjacent attacker t...

7.4CVSS7.3AI score0.02872EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•20 views

The vulnerability of the Ethernet component in the Android operating system’s kernel allows attackers to increase their privileges.

The vulnerability of the Ethernet component in the Android operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

6.7CVSS6.4AI score0.00172EPSS
SaveExploits0References12Affected Software2
Prion
Prion
•added 2021/02/26 4:15 p.m.•19 views

Design/Logic Flaw

The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited, the PLC will show an error state and...

5CVSS7.7AI score0.02498EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/02/26 3:10 p.m.•43 views

CVE-2020-24686 AC500 V2 webserver denial of service vulnerability

The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited, the PLC will show an error state and...

7.5CVSS7.7AI score0.02498EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/02/25 12:00 a.m.•13 views

The vulnerability of the Junos operating system’s EVPN/VXLAN technology allows a attacker to trigger a service failure.

The vulnerability of the EVPN/VXLAN technology implementation in Junos routers of the QFX10K series lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

6.5CVSS6.7AI score0.00508EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•13 views

The vulnerability of Intel Ethernet I210 controller’s microprogramming software, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet I210 controller microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.5CVSS5.5AI score0.00267EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•11 views

The vulnerability of Intel Ethernet I210 controller’s microprogramming software, related to incorrect resource initialization, allows a hacker to trigger a service failure.

The vulnerability of Intel Ethernet I210 controller’s microprogramming software is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

6.7CVSS5.5AI score0.00249EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•8 views

The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS6.7AI score0.00345EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•14 views

The vulnerability of Intel Ethernet I210 controller’s microprogramming software, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet I210 controller microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.5AI score0.00267EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder