Server side request forgery (ssrf)

SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker c...

CVE-2020-1685

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

CVE-2020-1688

On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an...

CVE-2020-1684

On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could lead to traffic interruption. Application identification is enabled by default and is automatically turned on when...

CVE-2020-1685

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

Design/Logic Flaw

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

CVE-2020-1685

CVE-2020-1685 affects Juniper Networks Junos OS on EX4600 and QFX5K (VXLAN) where stateless firewall filters with a single user-vlan-id match can cause the discard action to only drop traffic with that VLAN ID, allowing other VLANs through. Affected QFX5K/Junos versions are listed in the CVE entr...

Unspecified Vulnerability in Unisys Stealth (core)

The unisys stealthcore is a firewall from Unisys. This firewall is easy to configure and expand, can be upgraded by micro-segmentation, and fully protects internal data security. A security vulnerability exists in Unisys Stealthcore versions prior to 4.0.134 that stems from storing passwords in a...

Vulnerability fixed in Sonicwall

Due to a vulnerability in SonicOS, a remote malicious party can cause a Denial of Service DoS and potentially execute arbitrary code execute arbitrary code by sending a malicious request to the firewall. SonicWall has released updates to address the vulnerability. fix. For more information, see:...

Command Execution Vulnerability in D-Shield_Firewall of Shenzhen DiYuan Technology Co.

D ShieldFirewall is an active defense protection software designed for IIS. D ShieldFirewall has a command execution vulnerability that can be exploited by attackers to gain server control privileges...

Cisco IOS XE Software Zone Based Firewall DoS (cisco-sa-zbfw-94ckG4G)

According to its self-reported version, IOS-XE is affected by multiple denial of service vulnerabilities in the zone-based firewall feature due to incomplete handling of Layer 4 packets through the device. An unauthenticated, remote attacker can exploit these, by sending a certain sequence of...

SonicWALL SonicOS Denial of Service Vulnerability

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A denial of service vulnerability exists in the SSLVPN service in SonicWALL SonicOS that originates from the release of an invalid pointer, which can be exploited by an attacker to cause the firewa...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28765)

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A buffer overflow vulnerability exists in SonicWALL SonicOS, which can be exploited by an attacker to cause a denial of service in SSL-VPN and Proposed Helper Portal, which can lead to a firewall...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28766)

SonicOS is SonicWALL's proprietary operating system and firmware for SonicWALL firewall appliances. A buffer overflow vulnerability exists in SonicWALL SonicOS that can be exploited by a remote, unauthenticated attacker to cause a denial of service of the firewall's SSLVPN service, which can lead...

SonicWALL SonicOS Buffer Overflow Vulnerability (CNVD-2021-28763)

SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWall, Inc. A buffer overflow vulnerability exists in SonicWALL SonicOS, which can be exploited by an attacker to cause an invalid file reference to go out of bounds, resulting in a firewall crash...

CVE-2020-5143

SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username enumeration based on the server responses. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and G...

CVE-2020-5142

A stored cross-site scripting XSS vulnerability exists in the SonicOS SSLVPN web interface. A remote unauthenticated attacker is able to store and potentially execute arbitrary JavaScript code in the firewall SSLVPN portal. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen ...

CVE-2020-5139

A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service DoS due to the release of Invalid pointer and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3,...

CVE-2020-5134

A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0...

CVE-2020-5133

A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow, which leads to a firewall crash. This vulnerability affected SonicOS Gen 6 version 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version 7.0.0.0...