The vulnerability of SonicWall SMA 100 network firewall microprogramming software, caused by buffer overflow in dynamic memory, allows attackers to execute arbitrary code or cause a service failure.

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is caused by buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of SonicWall SMA 100 network firewall microprogramming software, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to information disclosure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ManageEngine Firewall Analyzer 12.5.x < 12.5.657 / 12.6.x < 12.6.002 / 12.6.104 / 12.6.118 Authenticate Bypass

The version of ManageEngine Firewall Analyzer running on the remote web server 12.5.x prior to 12.5.657, or 12.6.x prior to 12.6.002 / 12.6.104 / 12.6.118. It is, there, affected by an authentication bypass vulnerability. Due to the lack of proper request handling an unauthenticated, remote...

CVE-2022-37812

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg...

WordPress plugin Web Application Firewall 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2022-27812

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS...

CVE-2022-27812

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS...

CVE-2022-27812

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS...

Code injection

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS...

CVE-2022-27812

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS...

CVE-2022-27812

CVE-2022-27812 affects Stormshield Network Security (SNS) firewall. Across multiple versions (3.7.0–3.7.29, 3.11.0–3.11.17, 4.2.0–4.2.10, 4.3.0–4.3.6), sending specific forged UDP/ICMP traffic can lead to a Denial of Service by driving the firewall to high load or crash. The available connected d...

PT-2022-6318 · Zyxel · Zywall/Usg +3

Name of the Vulnerable Software and Affected Versions: Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72 Zyxel VPN series firmware versions 4.30 through 5.32 Zyxel USG FLEX series firmware versions 4.50 through 5.32 Zyxel ATP series firmware versions 4.32 through 5.32 Description: The...

WordPress plugin Security, Antivirus, Firewall – S.A.F 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A security vulnerability...

Security Bulletin: GUI DoS vulnerability in SAN Volume Controller and Storwize Family (CVE-2014-0050)

Summary GUI interface can be disrupted by exploitation of Apache Tomcat vulnerability Vulnerability Details CVEID: CVE-2014-0050 DESCRIPTION: This bulletin relates to vulnerabilities in the Apache Tomcat component which, if successfully exploited, could stop the product’s web server and deny acce...

Security Bulletin: Java vulnerability on IBM SAN Volume Controller and Storwize Family (CVE-2014-0411)

Summary Java vulnerability could allow decryption of long GUI session Vulnerability Details CVEID: CVE-2014-0411 DESCRIPTION: Java is used in the system’s GUI. Timing differences based on the validity of messages can be exploited to decrypt the entire session. The exploit is not trivial, requirin...

SUSE SLES15 / openSUSE 15 Security Update : podman (SUSE-SU-2022:2839-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2839-1 advisory. Updated to version 3.4.7: - CVE-2022-1227: Fixed an issue that could allow an attacker to publish a malicious image t...

[APPFW]"File too large" raises when upgrading appfw default signature "*Default Signatures"

Error "File too large" raises when to upgrade default signatures to version 89V89 On GUI Log sample could be seen in ns.log Jul 25 09:09:18 12 httpd: 49801 Netscalerip 127.0.0.1 - User nsroot - Remoteip 127.0.0.1 - Method POST - Command "params": "warning": "YES" "systemfile": "filename":...

Unified Threat Management: The All-in-One Cybersecurity Solution

UTM Unified threat management is thought to be an all-in-one solution for cybersecurity. In general, it is a versatile software or hardware firewall solution integrated with IPS Intrusion Prevention System and other security services. A universal gateway allows the user to manage network security...

Sequi PortBloque S 授权问题漏洞

Sequi PortBloque S is a specialized firewall from Sequi. It protects Modbus devices from serial attacks. An authorization issue vulnerability exists in Sequi PortBloque S. The vulnerability stems from the presence of incorrect authentication issues, which can be exploited by an attacker to bypass...

Sequi PortBloque S 安全漏洞

Sequi PortBloque S is a specialized firewall from Sequi. It protects Modbus devices from serial attacks. A security vulnerability exists in Sequi PortBloque S, which arises from an incorrect authentication issue that can be exploited by an attacker to bypass the authentication process and gain...