13911 matches found
The vulnerability of SSL VPN configuration loading mechanisms of Sophos firewalls allows attackers to execute arbitrary code.
The vulnerability of SSL VPN configuration loading on Sophos firewalls lies in the possibility of code injection. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2022-4390
CVE-2022-4390 affects NETGEAR RAX30 AX2400 series routers prior to version 1.0.9.90. A network misconfiguration enables IPv6 on the WAN by default, and IPv6 firewall rules are not consistently applied, potentially allowing arbitrary access to IPv6 services (e.g., SSH/Telnet on ports 22/23) from t...
puppetlabs-firewall: unmanaged rules could leave system in an unsafe state via duplicate comment
A flaw was found in the Puppet Firewall module. In certain situations, an unmanaged rule can exist on the target system that has the same comment as a rule specified in the manifest. When this condition is true, Puppet will ignore the unmanaged rule and continue to apply the rule in the manifest...
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (puppet-firewall) security update
An update for puppet-firewall is now available for Red Hat OpenStack Platform 16.1.9 Train for Red Hat Enterprise Linux RHEL 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
CVE-2022-46770
qubes-mirage-firewall aka Mirage firewall for QubesOS 0.8.x through 0.8.3 allows guest OS users to cause a denial of service CPU consumption and loss of forwarding via a crafted multicast UDP packet IP address range of 224.0.0.0 through 239.255.255.255...
Design/Logic Flaw
qubes-mirage-firewall aka Mirage firewall for QubesOS 0.8.x through 0.8.3 allows guest OS users to cause a denial of service CPU consumption and loss of forwarding via a crafted multicast UDP packet IP address range of 224.0.0.0 through 239.255.255.255...
CVE-2022-46770
CVE-2022-46770 affects Mirage firewall for QubesOS (qubes-mirage-firewall) versions 0.8.0–0.8.3. The vulnerability arises from handling crafted multicast UDP traffic (IP range 224.0.0.0–239.255.255.255) that can cause a denial of service, resulting in CPU consumption and loss of forwarding. The D...
CVE-2022-46770
qubes-mirage-firewall aka Mirage firewall for QubesOS 0.8.x through 0.8.3 allows guest OS users to cause a denial of service CPU consumption and loss of forwarding via a crafted multicast UDP packet IP address range of 224.0.0.0 through 239.255.255.255...
MirageOS qubes-mirage-firewall 资源管理错误漏洞
qubes-mirage-firewall is a MirageOS open source single kernel that can run as a QubesOS ProxyVM. A security vulnerability exists in MirageOS qubes-mirage-firewall versions 0.8.x through 0.8.3, which originates from a denial of service that allows a client to operate the system's users via special...
CVE-2022-46770
qubes-mirage-firewall aka Mirage firewall for QubesOS 0.8.x through 0.8.3 allows guest OS users to cause a denial of service CPU consumption and loss of forwarding via a crafted multicast UDP packet IP address range of 224.0.0.0 through 239.255.255.255...
CVE-2022-46770
qubes-mirage-firewall aka Mirage firewall for QubesOS 0.8.x through 0.8.3 allows guest OS users to cause a denial of service CPU consumption and loss of forwarding via a crafted multicast UDP packet IP address range of 224.0.0.0 through 239.255.255.255...
Zyxel USG/ZyWALL 跨站脚本漏洞
Zyxel USG/ZyWALL is a firewall from China Heqin Zyxel. A security vulnerability exists in Zyxel USG/ZyWALL versions prior to V4.73, VPN versions prior to V5.32, USG FLEX versions prior to V5.32, and ATP versions prior to V5.32, which stems from a Cross-Site Scripting XSS vulnerability in a CGI...
CVE-2022-43516
A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...
CVE-2022-43516
A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...
CVE-2022-43516
A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...
Design/Logic Flaw
A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...
UBUNTU-CVE-2022-43516
A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...
PT-2022-26952 · Microsoft +2 · Windows Firewall +3
Name of the Vulnerable Software and Affected Versions: Zabbix agent affected versions not specified Description: A Firewall Rule is created in Windows Firewall after Zabbix agent installation, allowing all incoming TCP connections to all programs from any source and to all ports. Recommendations:...
Zabbix 安全漏洞
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix that stems from the installation of the Zabbix proxy MSI, which creates a firewall rule in...
Mirage firewall for QubesOS 0.8.0-0.8.3 Denial of Service (DoS) Exploit
This module allows remote attackers to cause a denial of service DoS in Mirage firewall for QubesOS 0.8.0-0.8.3 via a specifically crafted UDP request. Module Options msf use auxiliary/dos/mirageos/qubes/miragefirewalldos msf undefinedmiragefirewalldos show actions ...actions... msf...