3418 matches found
Improper access control
A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...
CVE-2024-20315
A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...
CVE-2024-20315
A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...
CVE-2024-20322
A vulnerability in the access control list ACL processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface...
CVE-2024-20322
Cisco IOS XR Software vulnerability CVE-2024-20322 affects MPLS and Pseudowire ingress ACL processing. Root cause: improper assignment of lookup keys to internal interface contexts, enabling an unauthenticated remote attacker to bypass a configured ACL and access resources behind the device. Expl...
CVE-2024-20322
A vulnerability in the access control list ACL processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface...
CVE-2024-20315: Improper Access Control
A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...
PT-2024-2339 · Cisco · Cisco Ios Xr
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: The issue is related to insufficient access control on MPLS interfaces in Cisco IOS XR Software, specifically due to improper assignment of lookup keys to internal interface...
Cisco IOS XR Security Vulnerability
Cisco IOS XR is an operating system developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS XR that originates from a security hole in ingress direction IP access control lists ACLs on MPLS and Pseudowire PW interfaces that could allow an unauthenticated, remote...
CVE-2024-20322: Improper Access Control
A vulnerability in the access control list ACL processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface...
PT-2024-2337 · Cisco · Cisco Ios Xr
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the access control list ACL processing on Pseudowire interfaces in the ingress direction could allow an unauthenticated, remote attacker to bypass a...
AZL-38602 CVE-2024-1441 affecting package libvirt for versions less than 10.0.0-4
An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of...
DEBIAN-CVE-2024-1441
An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of...
UBUNTU-CVE-2024-1441
An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of...
CVE-2024-1441 Libvirt: off-by-one error in udevlistinterfacesbystatus()
An off-by-one error flaw was found in the udevListInterfacesByStatus function in libvirt when the number of interfaces exceeds the size of the names array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of...
[SECURITY] Fedora 40 Update: xml-commons-apis-1.4.01-46.fc40
xml-commons-apis is designed to organize and have common packaging for the various externally-defined standard interfaces for XML. This includes the DOM, SAX, and JAXP...
[SECURITY] Fedora 40 Update: osgi-compendium-7.0.0-20.fc40
OSGi Compendium, Interfaces and Classes for use in compiling bundles...
[SECURITY] Fedora 40 Update: nekohtml-1.9.22-26.fc40
NekoHTML is a simple HTML scanner and tag balancer that enables application programmers to parse HTML documents and access the information using standard XML interfaces. The parser can scan HTML files and "fix up" many common mistakes that human and computer authors make in writing HTML documents...
[SECURITY] Fedora 40 Update: apache-commons-collections4-4.4-15.fc40
Commons-Collections seek to build upon the JDK classes by providing new interfaces, implementations and utilities...
BIT-MEDIAWIKI-2023-37305
An issue was discovered in the ProofreadPage aka Proofread Page extension for MediaWiki through 1.39.3. In includes/Page/PageContentHandler.php and includes/Page/PageDisplayHandler.php, hidden users can be exposed via public interfaces...