Lucene search
+L

3577 matches found

OSV
OSV
added 2019/03/26 10:29 p.m.6 views

CVE-2019-6569

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime...

9.1CVSS7.3AI score0.01328EPSS
SaveExploits0References1
Prion
Prion
added 2019/03/26 10:29 p.m.23 views

Design/Logic Flaw

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime...

6.4CVSS9.1AI score0.01328EPSS
SaveExploits0References1Affected Software5
NVD
NVD
added 2019/03/26 10:29 p.m.24 views

CVE-2019-6569

The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime...

9.1CVSS9.3AI score0.01328EPSS
SaveExploits0References1
CVE
CVE
added 2019/03/26 9:12 p.m.91 views

CVE-2019-6569

CVE-2019-6569 affects Siemens SCALANCE X switches. The vulnerability (CWE-440) arises from the monitor barrier failing to block data on the mirror port, allowing data from the traffic-receiving network to be forwarded into the mirrored network and potentially influence configuration and runtime b...

9.1CVSS9.1AI score0.01328EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/03/25 12:00 a.m.29 views

F5 Networks BIG-IP : BIG-IP HSB vulnerability (K26455071)

Under certain conditions, hardware systems with a High-Speed Bridge HSB using non-default Layer 2 forwarding configurations may experience a lockup of the HSB. CVE-2019-6604 This vulnerability occurs when all of the following conditions are met : A VLAN group is configured. The...

6.8CVSS6.6AI score0.01017EPSS
SaveExploits0References2
OSV
OSV
added 2019/03/21 4:01 p.m.2 views

DEBIAN-CVE-2019-9895

In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding...

9.8CVSS9.5AI score0.02566EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/21 4:01 p.m.22 views

CVE-2019-9895

In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding...

9.8CVSS7.1AI score
SaveExploits0References8
OSV
OSV
added 2019/03/21 4:01 p.m.14 views

UBUNTU-CVE-2019-9895

In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding...

9.8CVSS7.5AI score0.02566EPSS
SaveExploits0References3
Hacker One
Hacker One
added 2019/03/21 3:27 a.m.30 views

Ubiquiti Inc.: Login as root without password on EdgeSwitchX

In EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SSH is enabled in th...

5.8CVSS4AI score0.00809EPSS
SaveExploits0
CVE
CVE
added 2019/03/21 2:31 a.m.174 views

CVE-2019-9895

CVE-2019-9895 affects PuTTY on Unix systems prior to version 0.71, where there is a remotely triggerable buffer overflow in any kind of server‑to‑client forwarding. The open-source advisories indicate this is addressed by upgrading to PuTTY 0.71 or newer (as reflected in multiple distro advisorie...

9.8CVSS8.7AI score0.02566EPSS
SaveExploits0References8Affected Software1
CNVD
CNVD
added 2019/03/21 12:00 a.m.18 views

PuTTY buffer overflow vulnerability

PuTTY is a suite of free Telnet, Rlogin and SSH client software from Simon Tatham Software Developers. The software is primarily used for remote administration of Linux systems. A buffer overflow vulnerability exists in the server-to-client forwarding process in PuTTY Unix versions prior to 0.71....

9.8CVSS7.7AI score0.02566EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/06 10:29 p.m.6 views

CVE-2019-1594

A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incomplete input validation of Extensible Authentication Protocol over LAN EAPOL...

7.4CVSS7.1AI score0.00805EPSS
SaveExploits0References2
Fedora
Fedora
added 2019/02/22 3:14 a.m.64 views

[SECURITY] Fedora 29 Update: systemd-239-12.git8bca462.fc29

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

8.8CVSS0.7AI score0.03016EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
added 2019/02/19 12:00 a.m.12 views

The vulnerability of the JunOS operating system, related to errors in input/output operations, allows a perpetrator to trigger a service failure.

The vulnerability of the JunOS operating system is related to errors in input/output operations. Exploiting this vulnerability can allow an attacker to cause a service failure due to a disruption in communication between the routing engine RE and the packet forwarding engine PFE...

5.5CVSS5.9AI score0.0035EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2019/02/18 1:26 a.m.64 views

[SECURITY] Fedora 28 Update: systemd-238-11.gita76ee90.fc28

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

8.8CVSS1.3AI score0.03016EPSS
SaveExploits9
Tenable Nessus
Tenable Nessus
added 2019/02/12 12:00 a.m.67 views

Debian DLA-1671-1 : coturn security update

Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056 A SQL injection vulnerability was discovered in the coTURN administrator web portal. As the administration web interface is shared with the production, it is unfortunately not possible to easily...

10CVSS7.8AI score0.02955EPSS
SaveExploits1References5
Debian
Debian
added 2019/02/11 10:27 a.m.220 views

[SECURITY] [DLA 1671-1] coturn security update

Package : coturn Version : 4.2.1.2-1+deb8u1 CVE ID : CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056 An SQL injection vulnerability was discovered in the coTURN administrator web portal. As the...

10CVSS9.5AI score0.02955EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2019/02/10 12:00 a.m.32 views

Debian: Security Advisory (DLA-1671-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.7AI score0.02955EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:00 a.m.8 views

The vulnerability of Cisco IOS and IOS XE operating system SSH servers allows attackers to circumvent security restrictions.

The vulnerability of Cisco IOS and IOS XE operating systems’ SSH servers is related to errors in the mechanisms for checking access to the SSH server, originating from instances of Virtual Routing and Forwarding VRF. Exploiting this vulnerability can allow a malicious actor to establish an SSH...

5.3CVSS6.2AI score0.00788EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2019/01/30 12:00 a.m.89 views

coturn <= 4.5.0.8 Multiple Vulnerabilities

coturn is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:coturn:coturn"; if description...

10CVSS8.7AI score0.02955EPSS
SaveExploits1References4
Rows per page
Query Builder