Lucene search
+L

702 matches found

Citrix
Citrix
added 2022/03/18 12:0 a.m.22 views

Automatically launch the downloaded .ica files when using Chrome browser

When you try to launch a published application or desktop from a browser by browsing to storefront or gateway URL, an".ica"file is downloaded. You need to click the .ica file to launch the session instead of auto launch...

7AI score
SaveExploits0
NCSC
NCSC
added 2022/02/24 12:0 a.m.9 views

Vulnerabilities fixed in Juniper JunOS

Juniper has fixed two vulnerabilities in JunOS for the MX and SRX series systems. An unauthenticated remote malicious person could exploit the vulnerabilities to cause a denial-of-service on the systems that have SIP Application Layer Gateway SIP ALG active. This gateway is active when the system...

7.5CVSS7.2AI score0.00945EPSS
SaveExploits0
GitLab Advisory Database
GitLab Advisory Database
added 2022/02/22 12:0 a.m.56 views

Use after free in Animation

The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but an exploit is available. There is currently little...

8.8CVSS2AI score0.20767EPSS
SaveExploits0References2Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/02/22 12:0 a.m.33 views

Use after free in Animation

The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but an exploit is available. There is currently little other public information on the issue...

8.8CVSS2.5AI score0.20767EPSS
SaveExploits0References2Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/02/22 12:0 a.m.33 views

Use after free in Animation

The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but an exploit is available. There is currently little other public information on the issue...

8.8CVSS2.5AI score0.20767EPSS
SaveExploits0References2Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/02/22 12:0 a.m.78 views

Use after free in Animation

The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but an exploit is available. There is currently little other public information on the issue...

8.8CVSS2.5AI score0.20767EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/01/25 8:15 p.m.8 views

CVE-2022-23025

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reache...

7.5CVSS7.1AI score0.00904EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/19 1:15 a.m.10 views

CVE-2022-22178

A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause ...

7.5CVSS5.8AI score0.00945EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/19 1:15 a.m.10 views

CVE-2022-22175

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause a sustain...

7.5CVSS5.8AI score0.00685EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/19 1:15 a.m.24 views

CVE-2022-22178

A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause ...

7.5CVSS0.00945EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/12 5:0 p.m.11 views

CVE-2022-22175

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause a sustain...

7.5CVSS7.2AI score0.00685EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/01/12 12:0 a.m.10 views

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from improper locking of the SI...

7.5CVSS7.4AI score0.00685EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.10 views

The vulnerability of the Session Initiation Protocol (SIP) implementation and the Network Address Translation (NAT) function of the Application Layer Gateway (ALG) in microprogrammable network interface devices from Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to circumvent security restrictions and establish unauthorized connections.

The vulnerability of the Session Initiation Protocol SIP implementation and the Network Address Translation NAT function of the Application Layer Gateway ALG in microprogrammable network devices such as Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to...

5CVSS5.9AI score0.011EPSS
SaveExploits0References3Affected Software2
Positive Technologies
Positive Technologies
added 2021/10/27 12:0 a.m.20 views

PT-2021-4887 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: Multiple vulnerabilities in the Application Level Gateway ALG for the...

5.3CVSS5.6AI score0.011EPSS
SaveExploits0References9
OSV
OSV
added 2021/10/26 2:15 p.m.24 views

ALPINE-CVE-2021-41158

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, an attacker can perform a SIP digest leak attack against FreeSWITCH and receive the...

7.5CVSS7.1AI score0.00799EPSS
SaveExploits3References1
ATTACKERKB
ATTACKERKB
added 2021/10/26 2:15 p.m.8 views

CVE-2021-41157

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. By default, SIP requests of the type SUBSCRIBE are not authenticated in the affected versions of FreeSWITCH. Abuse...

5.3CVSS6AI score0.0169EPSS
SaveExploits4References5Affected Software1
OSV
OSV
added 2021/10/25 4:15 p.m.9 views

ALPINE-CVE-2021-37624

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message...

7.5CVSS6.6AI score0.0352EPSS
SaveExploits5References1
ATTACKERKB
ATTACKERKB
added 2021/10/25 4:15 p.m.5 views

CVE-2021-37624

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message...

7.5CVSS6.8AI score0.0352EPSS
SaveExploits5References6Affected Software1
CNNVD
CNNVD
added 2021/10/25 12:0 a.m.21 views

FreeSWITCH 访问控制错误漏洞

FreeSWITCH is a free, open-source communications software program developed by Anthony Minessale, an individual developer in the United States. The software can be used to create audio, video, and SMS products and applications. An access control error vulnerability exists in FreeSWITCH versions...

7.5CVSS6.8AI score0.0352EPSS
SaveExploits5References7
CNNVD
CNNVD
added 2021/10/25 12:0 a.m.11 views

FreeSWITCH 访问控制错误漏洞

FreeSWITCH is a free, open-source communications software program developed by Anthony Minessale, an individual developer in the United States. The software can be used to create audio, video, and short message products and applications. An authorization issue vulnerability exists in FreeSWITCH...

5.3CVSS5.7AI score0.0169EPSS
SaveExploits4References6
Rows per page
Query Builder