Lucene search
K

174 matches found

Snyk
Snyk
added 2022/05/24 5:43 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when creating HTTPS web requests while building X509 certificate chains. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users...

6.5CVSS7AI score0.09338EPSS
Exploits0References2
Snyk
Snyk
added 2022/05/24 5:43 p.m.2 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when creating HTTPS web requests while building X509 certificate chains. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users...

6.5CVSS7AI score0.09338EPSS
Exploits0References2
Snyk
Snyk
added 2022/05/24 5:43 p.m.2 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when creating HTTPS web requests while building X509 certificate chains. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users...

6.5CVSS7AI score0.09338EPSS
Exploits0References2
OSV
OSV
added 2022/01/11 7:15 p.m.1 views

CVE-2021-34704

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

7.5CVSS7.1AI score
Exploits0References1
Prion
Prion
added 2022/01/11 7:15 p.m.13 views

Input validation

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

7.1CVSS7.5AI score0.00183EPSS
Exploits0References1Affected Software3
Cvelist
Cvelist
added 2022/01/11 6:50 p.m.12 views

CVE-2021-34704 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...

8.6CVSS8.2AI score0.00254EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/10/29 12:0 a.m.39 views

Cisco Firepower Threat Defense Software Web Services Multiple DoS (cisco-sa-asafdt-webvpn-dos-KSqJAKPA)

According to its self-reported version, Cisco FTD Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote...

8.6CVSS7.3AI score0.00263EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2021/10/29 12:0 a.m.39 views

Cisco Adaptive Security Appliance Software Web Services Multiple DoS (cisco-sa-asafdt-webvpn-dos-KSqJAKPA)

According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote...

8.6CVSS7.3AI score0.00263EPSS
Exploits0References8
OSV
OSV
added 2021/10/27 7:15 p.m.1 views

CVE-2021-34762

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to...

8.1CVSS5.9AI score0.00195EPSS
Exploits0References1
Cisco
Cisco
added 2021/10/27 4:0 p.m.42 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. These vulnerabilities are due to improper input...

8.6CVSS8.1AI score0.00263EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/10/27 12:0 a.m.1 views

PT-2021-4615 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the web services interface could allow an...

8.6CVSS7.4AI score0.00183EPSS
Exploits0References12
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2014:0569-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS8.8AI score0.54968EPSS
Exploits1References3
OSV
OSV
added 2021/06/07 9:15 p.m.12 views

CVE-2021-29504

WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-CLI side, gaining full control over the...

7.4CVSS7.2AI score
Exploits0References7
Prion
Prion
added 2021/06/07 9:15 p.m.8 views

Hardcoded credentials

WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-CLI side, gaining full control over the...

7.5CVSS7.6AI score0.01149EPSS
Exploits0References7Affected Software1
Prion
Prion
added 2021/05/27 8:15 p.m.18 views

Server side request forgery (ssrf)

A Server-side request forgery SSRF flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by supplying a URL that could lead to the server processing it. This flaw leads to the connection to internal services or the exposure of...

2.1CVSS5.4AI score0.00039EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/05/19 11:3 p.m.19 views

GHSA-RWGM-F83R-V3QJ Improper Certificate Validation in WP-CLI framework

Impact An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-CLI side, gaining full control over the communication content, including the ability...

9.1CVSS8.5AI score0.01149EPSS
Exploits0References9
Friends Of PHP
Friends Of PHP
added 2021/05/14 2:37 p.m.19 views

Improper Certificate Validation in WP-CLI framework

Description Impact An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-CLI side, gaining full control over the communication content, including...

7.5CVSS7.2AI score0.01149EPSS
Exploits0Affected Software1
Friends Of PHP
Friends Of PHP
added 2021/05/14 2:37 p.m.25 views

Improper Certificate Validation in WP-CLI framework

Impact An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-CLI side, gaining full control over the communication content, including the ability...

9.1CVSS8.5AI score0.01149EPSS
Exploits0Affected Software1
OSV
OSV
added 2021/04/29 6:15 p.m.1 views

CVE-2021-1504

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

7.5CVSS5.9AI score0.00312EPSS
Exploits0References1
OSV
OSV
added 2021/04/29 6:15 p.m.2 views

CVE-2021-1445

Multiple vulnerabilities in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. These vulnerabilities are due to lack of proper input validation o...

7.5CVSS7.2AI score0.00312EPSS
Exploits0References1
Rows per page
Query Builder