Lucene search
+L

14562 matches found

ICS
ICS
•added 2018/08/28 12:00 a.m.•182 views

Schneider Electric Modicon M221

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely Vendor: Schneider Electric Equipment: Modicon M221 Vulnerabilities: Information Management Errors, Permissions, Privileges, and Access Controls 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow...

9.8CVSS9.4AI score0.02478EPSS
SaveExploits0References5
NVD
NVD
•added 2018/08/27 3:29 p.m.•26 views

CVE-2018-15904

A10 ACOS Web Application Firewall WAF 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.1.2-P4 mishandles the configured rules for blocking SQL injection attacks, aka A10-2017-0008...

9.8CVSS10AI score0.0106EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/08/27 2:00 p.m.•34 views

CVE-2018-15904

A10 ACOS Web Application Firewall WAF 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8, and 4.1.2 before 4.1.2-P4 mishandles the configured rules for blocking SQL injection attacks, aka A10-2017-0008...

10AI score0.0106EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2018/08/23 8:27 p.m.•2393 views

Detecting Apache Struts 2 Namespace RCE: CVE-2018-11776

A new remote code execution vulnerability in Apache Struts 2, CVE-2018-11776, was disclosed yesterday. While this vulnerability does not exist with a default configuration of Struts, it does exist in commonly seen configurations for some Struts plugins. Update August 24, 2018: A dashboard for thi...

9.3CVSS1.8AI score0.99991EPSS
SaveExploits91
n0where
n0where
•added 2018/08/21 6:47 p.m.•180 views

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring: Kemon

If third-party vendors want to add new features to the macOS kernel, such as antivirus capabilities, ransomware blocking, data breach auditing, behavior monitoring and so on, they usually need the support of the system’s exported interfaces. At present, only two known official interfaces are...

9.3CVSS0.9AI score0.01375EPSS
SaveExploits0References2
OSV
OSV
•added 2018/08/21 1:29 p.m.•15 views

CVE-2017-17305

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbache...

5.9CVSS5.8AI score0.01045EPSS
SaveExploits0References1
Prion
Prion
•added 2018/08/21 1:29 p.m.•21 views

Design/Logic Flaw

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.8CVSS7.5AI score0.01082EPSS
SaveExploits0References1Affected Software4
OSV
OSV
•added 2018/08/21 1:29 p.m.•13 views

CVE-2017-17311

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.5CVSS5.8AI score0.01082EPSS
SaveExploits0References1
OSV
OSV
•added 2018/08/21 1:29 p.m.•12 views

CVE-2017-17312

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.5CVSS5.8AI score0.01082EPSS
SaveExploits0References1
Prion
Prion
•added 2018/08/21 1:29 p.m.•34 views

Design/Logic Flaw

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbache...

4.3CVSS6.1AI score0.01045EPSS
SaveExploits0References1Affected Software4
NVD
NVD
•added 2018/08/21 1:29 p.m.•26 views

CVE-2017-17311

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.8CVSS7.6AI score0.01082EPSS
SaveExploits0References1
NVD
NVD
•added 2018/08/21 1:29 p.m.•27 views

CVE-2017-17312

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.8CVSS7.6AI score0.01082EPSS
SaveExploits0References1
NVD
NVD
•added 2018/08/21 1:29 p.m.•33 views

CVE-2017-17305

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbache...

5.9CVSS6.2AI score0.01045EPSS
SaveExploits0References1
Prion
Prion
•added 2018/08/21 1:29 p.m.•20 views

Design/Logic Flaw

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.8CVSS7.5AI score0.01082EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
•added 2018/08/21 1:00 p.m.•34 views

CVE-2017-17312

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.6AI score0.01082EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/08/21 1:00 p.m.•43 views

CVE-2017-17305

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a Bleichenbacher Oracle vulnerability in the IPSEC IKEv1 implementations. Remote attackers can decrypt IPSEC tunnel ciphertext data by leveraging a Bleichenbache...

6.2AI score0.01045EPSS
SaveExploits0References1
CVE
CVE
•added 2018/08/21 1:00 p.m.•71 views

CVE-2017-17305

CVE-2017-17305 affects Huawei Firewall products (USG2205BSR, USG2220BSR, USG5120BSR, USG5150BSR) with Bleichenbacher Oracle vulnerability in IPsec IKEv1 implementations. A Bleichenbacher RSA padding oracle could allow remote attackers to decrypt IPSec tunnel ciphertext, enabling a Bleichenbacher ...

5.9CVSS5.5AI score0.01045EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2018/08/21 1:00 p.m.•64 views

CVE-2017-17312

CVE-2017-17312 affects Huawei Firewall products (USG2205BSR, USG2220BSR, USG5120BSR, USG5150BSR) where the IPsec IKEv1 implementations mishandle malformed messages, allowing a network-attacker to trigger a denial of service. Impact is availability loss on affected devices. Related OpenVAS/CNVD/NV...

7.8CVSS7.5AI score0.01082EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/08/21 1:00 p.m.•32 views

CVE-2017-17311

Some Huawei Firewall products USG2205BSR V300R001C10SPC600; USG2220BSR V300R001C00; USG5120BSR V300R001C00; USG5150BSR V300R001C00 have a DoS vulnerability in the IPSEC IKEv1 implementations of Huawei Firewall products. Due to improper handling of the malformed messages, an attacker may sent...

7.6AI score0.01082EPSS
SaveExploits0References1
CVE
CVE
•added 2018/08/21 1:00 p.m.•56 views

CVE-2017-17311

The CVE-2017-17311 issue affects Huawei Firewall products USG2205BSR (V300R001C10SPC600), USG2220BSR (V300R001C00), USG5120BSR (V300R001C00), and USG5150BSR (V300R001C00). It is a DoS in the IPsec IKEv1 implementations caused by improper handling of malformed messages; a crafted packet can cause ...

7.8CVSS7.5AI score0.01082EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder