984 matches found
USN-4876-1: Linux kernel vulnerabilities
Olivier Benjamin and Pawel Wieczorkiewicz discovered a race condition the Xen paravirt block backend in the Linux kernel, leading to a use-after-free vulnerability. An attacker in a guest VM could use this to cause a denial of service in the host OS. CVE-2020-29569 It was discovered that the...
The vulnerability of the Storm Control profile in Junos router operating systems of the EX and QFX5K series allows a hacker to induce a service failure.
The vulnerability of the Storm Control profile on Junos routers of the EX and QFX5K series is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Hackers Targeting Apple’s M1 Chip with Mac Malware
By Waqas Ex-NSA researcher has discovered malware that is equipped with anti-analysis capabilities and designed to specifically target Apple's new chip. This is a post from HackRead.com Read the original post: Hackers Targeting Apples M1 Chip with Mac Malware...
CVE-2021-0203
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
CVE-2021-0203
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
Design/Logic Flaw
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
CVE-2021-0217 Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets
A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP local/relay server configured may lead to exhaustion of DMA memory causing a Denial of Service DoS. Over time, exploitation of this...
CVE-2021-0203 Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured
On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...
Juniper Networks Junos OS Resource Management Error Vulnerability
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in multiple Juniper Networks products and can be exploited by an attacker...
Juniper Networks Junos OS EX and Junos OS QFX Security Vulnerabilities
Juniper Networks Junos OS EX and Juniper Networks Junos OS QFX are both switches from Juniper Networks, Inc. A security vulnerability exists in Junos OS EX and Junos OS QFX5K, which can be exploited by an attacker to trigger a denial of service by triggering a fatal error via storm control bypass...
Juniper Networks Junos OS Product Buffer Error Vulnerability
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A buffer error vulnerability exists in Junos OS EX and Junos OS QFX, which can be exploited by an attacker t...
CVE-2020-25034
eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sortby, searchURL, or searchattachment parameter to the email search feature...
CVE-2020-25034
CVE-2020-25034 affects eMPS prior to 9.0 on FireEye EX 3500 devices. The issue allows remote authenticated users to perform SQL injection via the email search feature’s parameters (sort, sort_by, search{URL], search[attachment]). The underlying root cause is unsafely constructed SQL in the email ...
Command Execution Vulnerability in SongCMS ex***.php File
SongCMS is a PHP+MySQL, ASP+Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the SongCMS ex.php file. An attacker can exploi...
The vulnerability of JunOS’s EX Series and QFX Series routers allows attackers to elevate their privileges to the root level.
The vulnerability of JunOS’s EX Series and QFX Series routers lies in their authentication deficiencies. Exploiting this vulnerability can allow attackers to gain privileges to the root level...
kernel: Memory leak in drivers/scsi/libsas/sas_expander.c
A memory leak flaw was found in the Linux kernel. An error in the resource cleanup of the sasexdiscoverexpander function can allow an attacker to induce error conditions that could crash the system. The highest threat from this vulnerability is to system availability...
ex-agent.jp Cross Site Scripting vulnerability OBB-1371913
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ex-employee hacked Cisco’s AWS Infrastructure; erased virtual machines
By Zara Khan Sudhish Kasaba Ramesh, an Indian citizen on an H1-B visa has pleaded guilty to "Damaging Cisco’s Network." This is a post from HackRead.com Read the original post: Ex-employee hacked Ciscos AWS Infrastructure; erased virtual machines...
ex-on.co.kr Cross Site Scripting vulnerability OBB-1272314
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ex-on.co.kr Cross Site Scripting vulnerability OBB-1267901
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...