CVE-2024-6437

CVE-2024-6437 affects Arista EOS when policy-based routing (PBR), BGP Flowspec, or interface traffic policy is configured to redirect traffic to a next hop. The issue causes certain IPv4 packets (e.g., with IP options) to bypass the configured nexthop and be slow-path forwarded by the kernel to t...

CLSA-2025-1736503350 haproxy: Fix of CVE-2023-40225

CVE-2023-40225: Fix forward empty Content-Length headers issue...

Arista EOS 安全漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from On affected platforms running Arista EOS, if some features are configured to redirect IP traffic to the next hop may bypa...

CVE-2024-54010

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

PT-2025-1019 · Hewlett Packard · Hpe Aruba Networking Cx 10000 Series Switches

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking CX 10000 Series Switches affected versions not specified Description: A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists, which could allow an unauthenticated adjacent attack...

Hewlett Packard Enterprise CX 10000 安全漏洞

The Hewlett Packard Enterprise CX 10000 HPE CX 10000 is a series of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise CX 10000 that stems from a firewall component that allows an unauthenticated adjacent attacker to perform packet...

PT-2025-51833

Name of the Vulnerable Software and Affected Versions Dropbear versions 2024.84 through 2025.88 Description An authenticated user can achieve privilege escalation in Dropbear via Unix domain socket forwardings. Specifically, a user able to log in via SSH can connect to any Unix socket as root,...

Cosmos: Making transfer v2 channel unupgradable through the forwarding

The transfer v2 channel can become unupgradable through the forwarding functionality. The forwarding process can create packet commitments on a legitimate channel, which cannot be deleted due to the lack of acknowledgments from a malicious channel. This results in the legitimate channel being...

Ubuntu: Security Advisory (USN-7161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos OS Vulnerability (JSA88134)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88134 advisory. - An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine pfe Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated,...

Synology Router Manager 安全漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the router's port forwarding feature, an...

CVE-2024-11481

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints...

CVE-2024-11481

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints...

CVE-2024-11481

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints...

CVE-2024-11481

CVE-2024-11481 concerns Trellix Enterprise Security Manager (ESM) 11.6.10. The issue enables unauthenticated access to the internal Snowservice API, with improper path traversal handling and insecure forwarding to an AJP backend, lacking authentication for internal API endpoints. Documents indica...

Trellix Enterprise Security Manager 安全漏洞

Trellix Enterprise Security Manager Trellix ESM is an application from American FireEye Trellix, Inc. Used for real-time monitoring and analysis enables you to quickly prioritize, investigate and respond to hidden threats. A security vulnerability exists in Trellix Enterprise Security Manager...

podman: podman machine spawns gvproxy with port bound to all IPs

A flaw was found in podman. The podman machine function used to create and manage Podman virtual machine containing a Podman process spawns a gvproxy process on the host system. The gvproxy API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS routers of the MX Series and Junos OS routers of the PTX Series and ACX Series allows a attacker to cause service interruptions.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS routers of the MX Series and Junos OS Evolved routers of the PTX Series and ACX Series is related to improper syntax validation during input verification. Exploiting this vulnerability can allow an attacker...

CVE-2024-28731

Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via the Port forwarding option...

CVE-2024-28731

Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via the Port forwarding option...