Lucene search
+L

1769 matches found

Tenable Nessus
Tenable Nessus
added 2023/10/17 12:00 a.m.80 views

Cisco IOS Software Group Encrypted Transport VPN Out of Bounds Write (cisco-sa-getvpn-rce-g8qR68sx)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a...

6.6CVSS7.5AI score0.02344EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/10/17 12:00 a.m.61 views

Cisco IOS XE Software Group Encrypted Transport VPN Out of Bounds Write (cisco-sa-getvpn-rce-g8qR68sx)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control o...

6.6CVSS7.5AI score0.02344EPSS
SaveExploits0References6
CNVD
CNVD
added 2023/10/11 12:00 a.m.14 views

Open5GS Denial of Service Vulnerability (CNVD-2025-18588)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited by an attacker to register new VNF Virtual Network Function values...

7.5CVSS6.8AI score0.00515EPSS
SaveExploits0References1
PyPA
PyPA
added 2023/10/09 4:15 p.m.9 views

PYSEC-2023-195

OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...

6.5CVSS8AI score0.00568EPSS
SaveExploits1References3Affected Software1
Openbugbounty
Openbugbounty
added 2023/10/04 8:18 p.m.11 views

g-64.ru Cross Site Scripting vulnerability OBB-3721219

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:00 a.m.9 views

The vulnerability of the GDBackupSvc service in the G Data Total Security antivirus protection software allows a hacker to increase their privileges or execute arbitrary code.

The vulnerability of the GDBackupSvc service in the G Data Total Security antivirus protection tool is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a hacker to increase their privileges or execute arbitrary code...

7.8CVSS7.5AI score0.00396EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2023/10/03 12:00 a.m.10 views

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to intercept VNF Virtual Network Functions communications, thereby exposing sensitive information...

6.5CVSS6.7AI score0.00275EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/02 12:00 a.m.13 views

PT-2023-5953 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when triggering a camping on a 5G cell. It is also associated with a software vulnerability in...

7.8CVSS6.9AI score0.00324EPSS
SaveExploits0References6
The Hacker News
The Hacker News
added 2023/09/29 3:02 a.m.89 views

Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts

Cisco is warning of attempted exploitation of a security flaw in its IOS Software and IOS XE Software that could permit an authenticated remote attacker to achieve remote code execution on affected systems. The medium-severity vulnerability is tracked as CVE-2023-20109, and has a CVSS score of 6....

8.6AI score0.02344EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/09/29 12:00 a.m.22 views

G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the GDBackupSv...

7.8CVSS7.5AI score0.00396EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/09/28 12:00 a.m.10 views

PT-2023-5585 · G Data · G Data Total Security

Name of the Vulnerable Software and Affected Versions: G Data Total Security affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privilege...

7.8CVSS7.7AI score0.00396EPSS
SaveExploits0References7
NVD
NVD
added 2023/09/27 6:15 p.m.24 views

CVE-2023-20109

A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause...

6.6CVSS7.2AI score0.02344EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/09/27 5:23 p.m.13 views

CVE-2023-20109

A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause...

6.6CVSS8.3AI score0.02344EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/27 5:23 p.m.449 views

CVE-2023-20109

CVE-2023-20109 affects Cisco IOS and IOS XE GET VPN. Root cause: insufficient validation of GDOI/G-IKEv2 attributes in GET VPN, enabling an authenticated admin on a group member or key server to execute arbitrary code or crash the device. Impact (as stated): full device control or reboot/DoS. Rem...

6.6CVSS7.1AI score0.02344EPSS
SaveIn wildExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/27 5:23 p.m.44 views

CVE-2023-20109

A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause...

6.6CVSS7.4AI score0.02344EPSS
SaveExploits0References1
Cisco
Cisco
added 2023/09/27 4:00 p.m.60 views

Cisco IOS and IOS XE Software Cisco Group Encrypted Transport VPN Software Out-of-Bounds Write Vulnerability

A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause...

6.6CVSS7.2AI score0.02344EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/27 3:19 p.m.11 views

CVE-2023-41305

Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS5.8AI score0.00372EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/09/27 12:00 a.m.44 views

CVE-2023-20109

A vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause...

6.6CVSS7.2AI score0.02344EPSS
SaveIn wildExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.16 views

The vulnerability of the showMACfilterMAC function in D-Link DIR-816 A2 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the showMACfilterMAC function in D-Link DIR-816 A2 router software lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information by using...

10CVSS8AI score0.12242EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/09/21 1:15 p.m.8 views

CVE-2023-43239

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag5G in showMACfilterMAC...

9.8CVSS7.3AI score0.12242EPSS
SaveExploits1References2
Rows per page
Query Builder