Lucene search
+L

13890 matches found

NVD
NVD
added 2025/01/09 8:15 a.m.12 views

CVE-2024-12805

A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...

7.2CVSS0.00709EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/09 8:15 a.m.14 views

CVE-2024-12803

A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...

7.2CVSS0.00805EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/09 7:24 a.m.63 views

CVE-2024-12805

CVE-2024-12805 is a post-authentication format-string vulnerability in SonicOS management affecting SonicWall SonicOS devices. The issue, described in connected sources as a format string flaw, can allow a remote, authenticated attacker to crash the firewall and potentially achieve code execution...

7.2CVSS7.3AI score0.00709EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 7:24 a.m.6 views

CVE-2024-12805

A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...

9.6AI score0.00709EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/09 7:24 a.m.19 views

CVE-2024-12805

A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...

0.00709EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/09 7:21 a.m.20 views

CVE-2024-12803

A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...

0.00805EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 7:21 a.m.7 views

CVE-2024-12803

A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution...

9.8AI score0.00805EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/09 7:15 a.m.22 views

CVE-2024-53705

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall...

7.5CVSS0.00737EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 6:58 a.m.11 views

CVE-2024-53705

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall...

7.2AI score0.00737EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.8 views

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS that stems from the presence of a stack-based buffer overflow, which can be exploited by an authenticated, remote attacker to crash...

7.2CVSS7.6AI score0.00805EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.8 views

SonicWALL SonicOS 安全漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. A security vulnerability exists in SonicWALL SonicOS, which stems from a format string issue that can be exploited by an authenticated, remote attacker to crash the firewall and...

7.2CVSS7.5AI score0.00709EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/08 9:15 p.m.13 views

CVE-2024-54010

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

3.4CVSS0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/08 12:00 a.m.13 views

PT-2025-1019 · Hewlett Packard · Hpe Aruba Networking Cx 10000 Series Switches

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking CX 10000 Series Switches affected versions not specified Description: A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists, which could allow an unauthenticated adjacent attack...

3.4CVSS7AI score0.00241EPSS
SaveExploits0References8
NVD
NVD
added 2025/01/03 4:15 p.m.59 views

CVE-2024-56320

GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to improper authorization of access to the admin "Configuration XML" UI feature, and its associated API. A malicious insider/existing authenticated GoCD user with an existing GoCD...

9.4CVSS0.00742EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/01/03 3:37 p.m.17 views

CVE-2024-56320 GoCD vulnerable to admin privilege escalation by a malicious internal/existing authenticated user

GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to improper authorization of access to the admin "Configuration XML" UI feature, and its associated API. A malicious insider/existing authenticated GoCD user with an existing GoCD...

9.4CVSS6.5AI score0.00742EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/30 1:15 a.m.11 views

CVE-2024-13030

A vulnerability was found in D-Link DIR-823G 1.0.2B0520181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file /HNAP1/ of the component W...

9.8CVSS5.4AI score0.01927EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/12/28 12:00 a.m.8 views

PT-2025-3475 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version V15.03.05.19 Description: The issue is related to a stack overflow in the formSetFirewallCfg function when handling the firewallEn parameter. This can be exploited by a remote attacker to cause a denial of service...

10CVSS9.4AI score0.00752EPSS
SaveExploits1References5
OSV
OSV
added 2024/12/27 10:15 a.m.9 views

CVE-2024-3393

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

7.5CVSS5.8AI score0.28617EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/27 9:44 a.m.58 views

CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

8.7CVSS6.9AI score0.28617EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/27 9:44 a.m.621 views

CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

8.7CVSS0.28617EPSS
SaveExploits0References1
Rows per page
Query Builder