530 matches found
CVE-2023-44181 Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment
An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a l2 loop resulting in a DDOS violations and DDOS syslog. This issue is triggered when Storm control is enabled and ICMP...
CVE-2023-44181
The vulnerability CVE-2023-44181 affects Juniper Networks Junos OS on QFX5k devices, caused by an improperly implemented security check in storm control. When storm control is enabled and ICMPv6 traffic is present, packets can be punted to the ARP queue, creating an L2 loop that can lead to DoS c...
Juniper Networks Junos OS Code Issue Vulnerability
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a code issue vulnerability that arises from an improperly checked exception or anomaly...
RHEL 9 : Red Hat Ceph Storage 6.1 (RHSA-2023:5693)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5693 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system...
Code injection
In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random...
CVE-2020-27631
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...
CVE-2020-27633
In FNET 4.6.3, TCP ISNs are improperly random...
CVE-2023-38159: Sensitive Data Storage in Improperly Locked Memory
Windows Graphics Component Elevation of Privilege Vulnerability...
GitHub: [PATs] Ability to leak comments from issues without ANY "Issues" repo permissions by utilizing "Pull Request" permissions
An incorrect authorization vulnerability in GitHub Enterprise Server allowed issue comments to be read without proper permissions through improperly scoped tokens...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2023 Release 1 prior to version 1, which stems from an improperly exported android...
CVE-2023-39983: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application...
PT-2023-25671
Name of the Vulnerable Software and Affected Versions Bit Assist WordPress plugin versions prior to 1.1.9 Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and escape...
PT-2023-25575
Name of the Vulnerable Software and Affected Versions The Contact Form Builder by Bit Form WordPress plugin versions prior to 2.2.0 Description The issue allows high privilege users, such as admin, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not...
PT-2023-21485
Name of the Vulnerable Software and Affected Versions The Ultimate Addons for Contact Form 7 WordPress plugin versions prior to 3.1.29 Description The issue concerns the Ultimate Addons for Contact Form 7 WordPress plugin, where some settings are not properly sanitized and escaped. This could all...
CVE-2023-30559 Wireless Card Firmware Improperly Signed
The firmware update package for the wireless card is not properly signed and can be modified...
CVE-2023-35310: Sensitive Data Storage in Improperly Locked Memory
Windows DNS Server Remote Code Execution Vulnerability...
CVE-2023-33163: Sensitive Data Storage in Improperly Locked Memory
Windows Network Load Balancing Remote Code Execution Vulnerability...
CVE-2023-35362: Sensitive Data Storage in Improperly Locked Memory
Windows Clip Service Elevation of Privilege Vulnerability...