Lucene search
K

624 matches found

Vulnrichment
Vulnrichment
added 2021/02/24 7:30 p.m.9 views

CVE-2021-1229 Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability

A vulnerability in ICMP Version 6 ICMPv6 processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory leak, which over time could lead to a denial of service DoS condition. This vulnerability is due to improper error handling when an...

5.8CVSS6.8AI score0.01375EPSS
Exploits0References1
CNVD
CNVD
added 2021/02/04 12:0 a.m.12 views

Cisco IOS XR Denial of Service Vulnerability (CNVD-2021-09297)

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from a logic error in the processing of Telnet protocol...

8.6CVSS6.7AI score0.01952EPSS
Exploits0References1
CNVD
CNVD
added 2021/02/04 12:0 a.m.9 views

Cisco IOS XR Denial of Service Vulnerability (CNVD-2021-09296)

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from improper resource allocation when an affected device...

8.6CVSS6.6AI score0.01952EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/02/03 12:0 a.m.4 views

Cisco IOS XR 资源管理错误漏洞

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A denial of service vulnerability exists in the ingress packet processing function of Cisco IOS XR. The vulnerability stems from a logic error in the processing of Telnet protocol...

8.6CVSS7.1AI score0.01952EPSS
Exploits0References3
NVD
NVD
added 2021/01/21 10:15 a.m.20 views

CVE-2020-11137

Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

10CVSS9.8AI score0.01085EPSS
Exploits0References2
NVD
NVD
added 2021/01/21 10:15 a.m.6 views

CVE-2020-11138

Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

10CVSS9.4AI score0.01085EPSS
Exploits0References2
Prion
Prion
added 2021/01/21 10:15 a.m.17 views

Design/Logic Flaw

Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

10CVSS9.3AI score0.01085EPSS
Exploits0References2
Prion
Prion
added 2021/01/21 10:15 a.m.24 views

Integer overflow

Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

10CVSS9.6AI score0.01085EPSS
Exploits0References2
CVE
CVE
added 2021/01/21 9:41 a.m.69 views

CVE-2020-11137

CVE-2020-11137 describes an integer multiplication overflow in Qualcomm Snapdragon components that leads to a smaller-than-expected buffer allocation, causing memory access out of bounds and potential device instability across Snapdragon Auto/Compute/Connectivity/IoT families. Public sources (NVD...

10CVSS9.6AI score0.01085EPSS
Exploits0References2Affected Software491
Cvelist
Cvelist
added 2021/01/21 9:41 a.m.21 views

CVE-2020-11138

Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

9.5AI score0.01085EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/01/21 9:41 a.m.25 views

CVE-2020-11137

Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

9.8AI score0.01085EPSS
Exploits0References1
Citrix
Citrix
added 2020/11/09 12:0 a.m.4 views

StressPrinters

Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools StressPrinters Version 1.3.2 Created date: 03/30/2006 Modified date: 6/19/2013 Description Many printer driver problems in Terminal...

7AI score
Exploits0
Metasploit
Metasploit
added 2020/09/23 5:41 p.m.675 views

Netlogon Weak Cryptographic Authentication

A vulnerability exists within the Netlogon authentication process where the security properties granted by AES are lost due to an implementation flaw related to the use of a static initialization vector IV. An attacker can leverage this flaw to target an Active Directory Domain Controller and mak...

10CVSS8AI score0.99512EPSS
Exploits75
Tenable Nessus
Tenable Nessus
added 2020/09/01 12:0 a.m.43 views

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities (cisco-sa-iosxr-dvmrp-memexh-dSmpdvfz)

According to its self-reported configuration, Cisco IOS XR Software is affected by multiple vulnerabilities: - Multiple denial of service DoS vulnerabilities exist in the Distance Vector Multicast Routing Protocol DVMRP feature due to insufficient queue management for Internet Group Management...

8.6CVSS7.8AI score0.03959EPSS
Exploits0References5
OSV
OSV
added 2020/08/29 4:15 p.m.3 views

CVE-2020-3566

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protoco...

8.6CVSS7.3AI score0.03959EPSS
Exploits0References2
Prion
Prion
added 2020/08/29 4:15 p.m.20 views

Design/Logic Flaw

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protoco...

7.8CVSS7.5AI score0.03959EPSS
Exploits0References1Affected Software1
Mageia
Mageia
added 2020/08/18 5:41 p.m.40 views

Updated clamav packages fix security vulnerability

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. A...

7.5CVSS3.6AI score0.03204EPSS
Exploits0References3
Veracode
Veracode
added 2020/08/06 9:38 p.m.21 views

Authorization Bypass

clamav is vulnerable to authorization bypass. The vulnerability exists as a race condition that could occur when scanning malicious files. An attacker with local shell access could exploit this vulnerability by executing a script that could trigger the race condition. A successful exploit could...

6.3CVSS3AI score0.00264EPSS
Exploits0References9Affected Software1
Cloud Foundry
Cloud Foundry
added 2020/06/22 12:0 a.m.52 views

USN-4385-2: Intel Microcode regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Description USN-4385-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Skylake family 064EH from booting successfully...

5.5CVSS6.5AI score0.00587EPSS
Exploits0Affected Software1
NVD
NVD
added 2020/06/18 3:15 a.m.19 views

CVE-2020-3350

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. A...

6.3CVSS0.00264EPSS
Exploits0References7
Rows per page
Query Builder