free5GC Security Vulnerabilities

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version 3.3.0, which originates from an attacker being able to cause a denial of service using a specially crafted PFCP message mutated to an overflow...

CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

Slackware Linux 15.0 / current tigervnc Multiple Vulnerabilities (SSA:2023-317-01)

The version of tigervnc installed on the remote host is prior to 1.12.0 / 1.13.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-317-01 advisory. - A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the functio...

When Email Security Meets SaaS Security: Uncovering Risky Auto-Forwarding Rules

While intended for convenience and efficient communication, email auto-forwarding rules can inadvertently lead to the unauthorized dissemination of sensitive information to external entities, putting confidential data at risk of exposure to unauthorized parties. Wing Security Wing, a SaaS securit...

CVE-2023-21313

In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port “spec.ports.port” as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress.ip” field. Clusters where the LoadBalancer controller sets the...

PT-2023-12075 · Unknown · Kube-Proxy

Name of the Vulnerable Software and Affected Versions: Kube-proxy versions affected versions not specified Description: The issue concerns Kube-proxy on Windows, which can unintentionally forward traffic to local processes listening on the same port spec.ports.port as a LoadBalancer Service. This...

CVE-2023-46668

If Elastic Endpoint v7.9.0 - v8.10.3 is configured to use a non-default option in which the logging level is explicitly set to debug, and when Elastic Agent is simultaneously configured to collect and send those logs to Elasticsearch, then Elastic Agent API keys can be viewed in Elasticsearch in...

Juniper Junos OS DoS Vulnerability (JSA73174)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73174 advisory. - An Improper Handling of Inconsistent Special Elements vulnerability in the Junos Services Framework jsf module of Juniper Networks Junos OS allows an unauthenticated netwo...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series allows a attacker to induce a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based QFX5000 Series routers is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved routers of the PTX10003 series allows a attacker to compromise data integrity.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved PTX10003 series routers stems from insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote locati...

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS routers of the MX Series allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS routers of the MX Series is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos operating systems relates to the failure to release memory before deletion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS and Junos OS Evolved operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS and Junos OS Evolved operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos router operating systems of the QFX5000 and EX4600 series exists due to insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the Packet Forwarding Engine PFE module in Junos router operating systems of the QFX5000 and EX4600 series exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos routing devices of the MX series allows a attacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos MX routers involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...