Lucene search
+L

27 matches found

Cvelist
Cvelist
•added 2026/10/14 4:43 p.m.•40 views

CVE-2026-101969 Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled

An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a malformed PIM Hello message received on an IPv6-enabled PIM interface...

7.1CVSS0.00269EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/14 4:43 p.m.•11 views

EUVD-2026-101326

An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a malformed PIM Hello message received on an IPv6-enabled PIM interface...

7.1CVSS5.9AI score0.00269EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/14 4:43 p.m.•16 views

CVE-2026-101969

An Improper Input Validation vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows an unauthenticated adjacent attacker to trigger a denial of service (DoS) by sending a malformed PIM Hello message on an IPv6-enabled PIM interface. No specifi...

7.1CVSS5.9AI score0.00269EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•11 views

PT-2026-113821

An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a malformed PIM Hello message received on an IPv6-enabled PIM interface...

7.1CVSS5.9AI score0.00269EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•7 views

CVE-2026-101969: Improper Input Validation

An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a malformed PIM Hello message received on an IPv6-enabled PIM interface...

7.1CVSS5.9AI score0.00269EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/16 10:54 p.m.•69 views

CVE-2026-44452

CVE-2026-44452 affects the h2o HTTP server (supports HTTP/1.x, 2, 3). Affected behavior occurs when a TLS/QUIC ClientHello contains a zero-length SNI extension; h2o can attempt to copy the hostname assuming NULL-termination, causing a heap/segmentation fault that may enable a denial-of-service. T...

5.9CVSS5.7AI score0.00412EPSS
SaveExploits0References2Affected Software1
osv_osv
osv_osv
•added 2026/01/22 12:08 a.m.•32 views

OSV-2026-105 Use-of-uninitialized-value in pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476187680 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toStringAndMD5...

5.4AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2024-51961

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.00506EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:15 a.m.•24 views

CVE-2024-53379

Heap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version from 05/05/24 commit 64808a5e12c83b38f85c943dee0112e428dc2a43 allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hello message...

7.5CVSS6.2AI score0.00506EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/14 1:46 a.m.•32 views

CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...

9.1CVSS5.8AI score0.00582EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/23 12:00 a.m.•104 views

CVE-2024-53379

A heap buffer overflow exists in the server-side handshake implementation of Real Time Logic LLC's SharkSSL (specifically version from 05/05/24, commit 64808a5e12c83b38f85c943dee0112e428dc2a43 ). A remote attacker can exploit this vulnerability by sending a malformed Client-Hello message to trigg...

7.5CVSS6.1AI score0.00506EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/04 12:00 a.m.•37 views

PT-2024-25939

Name of the Vulnerable Software and Affected Versions Faucet SDN Ryu version 4.34 Description The issue allows attackers to cause a denial of service, resulting in an infinite loop, via a specific condition where length=0. This is related to the OFPHello function in the parser.py file...

7.5CVSS7.2AI score0.00681EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
•added 2023/07/17 12:00 a.m.•18 views

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the dnnspsend function in Linux operating system kernels is related to the pointer dereferencing when attempting to connect to a local host using the DECnet protocol. Exploiting this vulnerability allows a remote attacker to trigger a service failure by sending a specially...

6.8CVSS7.1AI score0.08478EPSS
SaveExploits3References33Affected Software4
osv_cve
osv_cve
•added 2021/11/08 4:15 a.m.•22 views

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

7.5CVSS6.9AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/08 4:15 a.m.•13 views

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

7.5CVSS7.1AI score0.01753EPSS
SaveExploits1References3
Mend
Mend
•added 2021/11/08 3:52 a.m.•5 views

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

8.7CVSS0.01753EPSS
SaveExploits1References2
CNVD
CNVD
•added 2015/03/23 12:00 a.m.•22 views

Fortinet Single Sign On collectoragent.exe stack buffer overflow vulnerability

Fortinet Single Sign On FSSO is a single sign-on solution for Fortinet devices. A stack buffer overflow vulnerability in collectoragent.exe in versions prior to Fortinet Single Sign On FSSO build 164 allows remote attackers to send a specially crafted PROCESSHELLO message to TCP port 8000 to...

7.5CVSS7.9AI score0.10333EPSS
SaveExploits5References1
OpenSSL
OpenSSL
•added 2014/08/06 12:00 a.m.•50 views

Vulnerability in OpenSSL - Crash with SRP ciphersuite in Server Hello message

A crash was found affecting SRP ciphersuites used in a Server Hello message. The issue affects OpenSSL clients and allows a malicious server to crash the client with a null pointer dereference read by specifying an SRP ciphersuite even though it was not properly negotiated with the client. This...

4.3CVSS6.7AI score0.1629EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2014/06/16 12:00 a.m.•70 views

SOL15343 - OpenSSL vulnerability CVE-2014-0221

The dtls1getmessagefragment function in d1both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service recursion and client crash via a DTLS hello message in an invalid DTLS handshake. CVE-2014-0221...

4.3CVSS6.5AI score0.87892EPSS
SaveExploits0References6
Mend
Mend
•added 2014/06/05 9:00 p.m.•6 views

CVE-2014-0221

The dtls1getmessagefragment function in d1both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service recursion and client crash via a DTLS hello message in an invalid DTLS handshake...

6.3CVSS0.87892EPSS
SaveExploits0References130
Rows per page
Query Builder