Lucene search
+L

17007 matches found

Vulnrichment
Vulnrichment
added 2019/10/02 7:00 p.m.8 views

CVE-2019-12673 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

8.6CVSS7.3AI score0.01772EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/10/02 7:00 p.m.38 views

CVE-2019-12673 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

8.6CVSS7.5AI score0.01772EPSS
SaveExploits0References1
CVE
CVE
added 2019/10/02 7:00 p.m.70 views

CVE-2019-12673

CVE-2019-12673 is a DoS vulnerability in the FTP inspection engine of Cisco ASA/FTD software caused by insufficient validation of FTP data. An unauthenticated, remote attacker can send crafted FTP traffic through an affected device to disrupt responsiveness. Cisco and related advisories confirm t...

8.6CVSS7.5AI score0.01772EPSS
SaveExploits0References1Affected Software2
Cisco
Cisco
added 2019/10/02 4:00 p.m.170 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Denial of Service Vulnerability

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

8.6CVSS7.6AI score0.01772EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.9 views

The vulnerability of the fly-admin-ftp component in the FLY operating environment of the Astra Linux system, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the ftp fly-admin-ftp component in the FLY operating environment of the Astra Linux system is related to the absence of changes in the access parameters for the root user directory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

3.8CVSS5.6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.11 views

The vulnerability of the GALAXY ERP resource management system allows a hacker to replace software updates.

The vulnerability of the Plain FTP protocol used by the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability can allow a malicious actor to gain access to software updates and...

3.4CVSS5.6AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2019/10/01 12:00 a.m.54 views

Fedora Update for curl FEDORA-2019-f2a520135e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8AI score0.49739EPSS
SaveExploits5References2
Amazon
Amazon
added 2019/09/30 12:00 a.m.232 views

Medium: curl

Issue Overview: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. CVE-2019-5481 Affected Packages: curl Issue Correction: Run yum update curl or yum update --advisory ALAS-2019-129...

9.8CVSS7.1AI score0.17939EPSS
SaveExploits0
Fedora
Fedora
added 2019/09/29 2:22 a.m.53 views

[SECURITY] Fedora 29 Update: curl-7.61.1-12.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

9.8CVSS0.49739EPSS
SaveExploits5
CNVD
CNVD
added 2019/09/26 12:00 a.m.17 views

Cisco IOS XE FTP ALG Denial of Service Vulnerability

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in the FTP Application Layer Gateway ALG feature used by Network Address Translation NAT, NAT64, and ZBFW in Cisco IOS XE. The vulnerabili...

8.6CVSS7AI score0.01973EPSS
SaveExploits0References1
OSV
OSV
added 2019/09/25 9:15 p.m.9 views

CVE-2019-12655

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

7.5CVSS7.5AI score0.01973EPSS
SaveExploits0References1
NVD
NVD
added 2019/09/25 9:15 p.m.22 views

CVE-2019-12655

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

8.6CVSS7.9AI score0.01973EPSS
SaveExploits0References1
Prion
Prion
added 2019/09/25 9:15 p.m.27 views

Buffer overflow

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

7.8CVSS7.7AI score0.01973EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2019/09/25 8:15 p.m.9 views

CVE-2019-12655 Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

8.6CVSS7.7AI score0.01973EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/09/25 8:15 p.m.31 views

CVE-2019-12655 Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

8.6CVSS7.8AI score0.01973EPSS
SaveExploits0References1
CVE
CVE
added 2019/09/25 8:15 p.m.114 views

CVE-2019-12655

The CVE-2019-12655 issue affects Cisco IOS XE Software, specifically the FTP Application Layer Gateway (ALG) used with NAT, NAT64, and ZBFW. The vulnerability stems from a buffer overflow that occurs when the device inspects certain FTP traffic, enabling an unauthenticated, remote attacker to cau...

8.6CVSS7.9AI score0.01973EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2019/09/25 4:00 p.m.130 views

Cisco IOS XE Software FTP Application Layer Gateway for NAT, NAT64, and ZBFW Denial of Service Vulnerability

A vulnerability in the FTP application layer gateway ALG functionality used by Network Address Translation NAT, NAT IPv6 to IPv4 NAT64, and the Zone-Based Policy Firewall ZBFW in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The...

8.6CVSS1.4AI score0.01973EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2019/09/25 12:00 a.m.48 views

openSUSE: Security Advisory for curl (openSUSE-SU-2019:2169-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.1AI score0.17939EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/09/25 12:00 a.m.30 views

openSUSE Security Update : curl (openSUSE-2019-2169)

This update for curl fixes the following issues : Security issues fixed : - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer bsc1149495. - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow bsc1149496. This update was imported from the SUSE:SLE-15:Update upda...

9.8CVSS6.1AI score0.17939EPSS
SaveExploits0References4
OSV
OSV
added 2019/09/24 8:18 a.m.10 views

OPENSUSE-SU-2019:2169-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer bsc1149495. - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow bsc1149496. This update was imported from the SUSE:SLE-15:Update update...

9.8CVSS9.9AI score0.17939EPSS
SaveExploits0References5
Rows per page
Query Builder