CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

Phicomm多款产品安全漏洞

PHICOMM K2 and others are products of PHICOMM, a China-based company.PHICOMM K2 is a wireless router.PHICOMM K3 is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band Gigabit wireless WiFi router.PHICOMM K3C is a dual-band...

VulnCheck KEV: CVE-2020-11899

The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability...

The vulnerability of the implementation of the Cisco Fabric Services over IP (CFSoIP) function in Cisco NX-OSS routing devices allows a attacker to trigger a service failure.

The vulnerability of the implementation of the Cisco Fabric Services over IP CFSoIP function in Cisco NX-OSS routing devices is related to an uncontrolled resource consumption during the processing of incoming CFSoIP packets. Exploiting this vulnerability could allow a malicious actor to cause...

CVE-2022-20624

A vulnerability in the Cisco Fabric Services over IP CFSoIP feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of incoming CFSoIP packets. An attacke...

Cisco NX-OS Software 输入验证错误漏洞

Cisco NX-OS Software is a suite of data center-grade operating system software for switches from Cisco. Cisco NX-OS Software suffers from an input validation error vulnerability that originates from a vulnerability in the Cisco Fabric Services over IP CFSoIP feature of Cisco NX-OS Software. An...

DEBIAN-CVE-2017-0371

MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attrtitle url;" attack within a DIV element that has an attacker-controlled URL in the title attribute...

The vulnerability of the ip6_xmit function in the (6_output.c) kernel of the Android operating system allows a hacker to increase their privileges.

The vulnerability of the ip6xmit function in the 6output.c kernel of the Android operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the implementation for specifying all domain names and IP addresses using Subject Alternative Names in the Node.js software platform allows attackers to perform spoofing attacks.

The vulnerability of the method for specifying all domain names and IP addresses in a Node.js software platform is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to perform spoofing attacks remotely...

CVE-2021-45392

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21CN in the sub422CE4 function in page /goform/setIPv6Status via the prefixDelegate parameter, which causes a Denial of Service...

PT-2022-15982 · Axis · Axis Ip Utility

Name of the Vulnerable Software and Affected Versions: AXIS IP Utility versions prior to 4.18.0 Description: The issue allows for remote code execution and local privilege escalation through DLL hijacking. IPUtility.exe attempts to load DLLs from its current working directory, which could allow f...

Appneta Tcpreplay 安全漏洞

Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic on UNIX-based operating systems from AppNeta Appneta, USA. A security vulnerability exists in Appneta Tcpreplay 4.3.4, which stems from a Reachable Assertion in tree.c's addtreeipv6...

CVE-2022-23029

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which ha...

January 18, 2022—KB5010791 (OS Build 17763.2458) Out-of-band

None None...

CVE-2022-22155

An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change events in Juniper Networks Junos OS allows an adjacent attacker to cause a memory leak in the Flexible PIC Concentrator FPC of an ACX5448 router. The continuous flapping of an IPv6 neighbor with...

In the IPv6 implementation in the Linux kernel before 5.13.3 net/ipv6/output_core.c has an information leak because of certain use of a hash table which although big doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

...

openvswitch: External triggered memory leak in Open vSwitch while processing fragmented packets

A memory leak was found in Open vSwitch OVS during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments...

openvswitch: External triggered memory leak in Open vSwitch while processing fragmented packets

A memory leak was found in Open vSwitch OVS during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending packet fragments...

CVE-2021-46148

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Some unprivileged users can view confidential information e.g., IP addresses and User-Agent headers for election traffic on a testwiki SecurePoll instance...

Trendnet AC2600 安全漏洞

The Trendnet AC2600 is a wireless router from Trendnet, Inc. A security vulnerability exists in the Trendnet AC2600 TEW-827DRU version 2.08B01, which stems from the software not having sufficient access control on the WAN interface. The default iptables ruleset for managing service access on the...