Lucene search
+L

20014 matches found

CNVD
CNVD
added 2021/09/29 12:0 a.m.58 views

F-Secure Internet Gatekeeper Arbitrary Code Execution Vulnerability

F-Secure Internet Gatekeeper is a gateway product that acts as a virus scanning agent for HTTP, SMTP, POP, and FTP protocols.An arbitrary code execution vulnerability exists in the Web user interface of F-Secure Internet Gatekeeper version 5 Series. The vulnerability can be exploited by an attack...

8.8CVSS1.8AI score0.00942EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/09/29 12:0 a.m.63 views

F-Secure Internet Gatekeeper Denial of Service Vulnerability

F-Secure Internet Gatekeeper is a gateway product that acts as a virus scanning agent for HTTP, SMTP, POP, and FTP protocols. a denial of service vulnerability exists in the web user interface of F-Secure Internet Gatekeeper version 5 Series. An attacker could exploit the vulnerability by sending...

7.5CVSS1.6AI score0.00607EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/28 10:15 a.m.28 views

CVE-2021-33601

A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server...

8.8CVSS0.00942EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/28 10:15 a.m.10 views

CVE-2021-33601

A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server...

8.8CVSS6.3AI score0.00942EPSS
SaveExploits0References2
NVD
NVD
added 2021/09/28 10:15 a.m.28 views

CVE-2021-33600

A denial-of-service DoS vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending...

7.5CVSS0.00607EPSS
SaveExploits0References2
Prion
Prion
added 2021/09/28 10:15 a.m.26 views

Design/Logic Flaw

A denial-of-service DoS vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending...

5CVSS7.4AI score0.00607EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/09/28 9:8 a.m.37 views

CVE-2021-33601 Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper

A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server...

7.6CVSS9AI score0.00942EPSS
SaveExploits0References2
CVE
CVE
added 2021/09/28 9:8 a.m.68 views

CVE-2021-33601

Summary: CVE-2021-33601 affects the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings via the Web UI, leading to arbitrary code execution on the F-Secure Internet Gatekeeper server. The connected Red Hat, CNVD, NVD, and other records corroborate this as...

8.8CVSS8.3AI score0.00942EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/09/28 9:6 a.m.33 views

CVE-2021-33600 Denial of Service Vulnerability in Web Interface of F-Secure Internet Gatekeeper

A denial-of-service DoS vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending...

5.4CVSS7.6AI score0.00607EPSS
SaveExploits0References2
CVE
CVE
added 2021/09/28 9:6 a.m.92 views

CVE-2021-33600

The CVE-2021-33600 entry describes a DoS in the web UI of F-Secure Internet Gatekeeper. An unauthenticated, remote attacker can trigger an assertion by sending a malformed HTTP request with a very large username parameter, potentially taking the product offline. Several connected sources (e.g., R...

7.5CVSS6.3AI score0.00607EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/09/28 12:0 a.m.10 views

F-Secure Internet Gatekeeper代码注入漏洞

F-Secure Internet Gatekeeper is a gateway product that acts as a virus scanning agent for HTTP, SMTP, POP, and FTP protocols.An arbitrary code execution vulnerability exists in the Web user interface of F-Secure Internet Gatekeeper version 5 Series. The vulnerability can be exploited by an attack...

8.8CVSS8.7AI score0.00942EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/09/28 12:0 a.m.8 views

F-Secure Internet Gatekeeper 输入验证错误漏洞

F-Secure Internet Gatekeeper is a gateway product that acts as a virus scanning agent for HTTP, SMTP, POP, and FTP protocols. a denial of service vulnerability exists in the web user interface of F-Secure Internet Gatekeeper version 5 Series. An attacker could exploit the vulnerability by sending...

7.5CVSS7.3AI score0.00607EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
added 2021/09/09 12:0 a.m.16 views

Border Loading Bar <= 1.0.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the f and t parameter found in the /titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.8AI score0.00895EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2021/09/07 1:15 p.m.29 views

CVE-2021-33599

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service infinite loop and freezes AV engine scanner. The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the...

5.5CVSS0.00411EPSS
SaveExploits0References2
Prion
Prion
added 2021/09/07 1:15 p.m.29 views

Design/Logic Flaw

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service infinite loop and freezes AV engine scanner. The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the...

4.3CVSS5.5AI score0.00411EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/09/07 1:15 p.m.5 views

CVE-2021-33599

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service infinite loop and freezes AV engine scanner. The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the...

5.5CVSS6.1AI score0.00411EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/09/07 12:12 p.m.42 views

CVE-2021-33599 Denial-of-Service (DoS) Vulnerability

A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service infinite loop and freezes AV engine scanner. The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the...

4.6CVSS5.7AI score0.00411EPSS
SaveExploits0References2
CVE
CVE
added 2021/09/07 12:12 p.m.71 views

CVE-2021-33599

The CVE-2021-33599 issue concerns the F-Secure Antivirus engine. The documented vulnerability arises when scanning WIM archive files, which can cause an infinite loop or other conditions that freeze the AV engine, leading to a Denial-of-Service. Exploitation is described as remote, with a success...

5.5CVSS5AI score0.00411EPSS
SaveExploits0References2Affected Software3
CNNVD
CNNVD
added 2021/09/03 12:0 a.m.9 views

F-secure F-Secure Anti-Virus 安全漏洞

F-secure F-Secure Anti-Virus is a suite of antivirus software from the Finnish company F-Secure F-secure. The program integrates several virus monitoring engines, performs real-time virus scanning of the operating system, and provides powerful background management features. A security...

5.5CVSS5.8AI score0.00411EPSS
SaveExploits0References3
NCSC
NCSC
added 2021/08/24 12:0 a.m.12 views

Vulnerability fixed in F-Secure anti-virus engine

A vulnerability has been fixed in the F-Secure anti-virus engine. A malicious party could potentially exploit the vulnerability to cause a denial-of-service by running a specially prepared file to be scanned. F-Secure has released updates to fix the vulnerability. For more information, see:...

6.5CVSS6.8AI score0.00739EPSS
SaveExploits0
Rows per page
Query Builder