Lucene search
+L

2190 matches found

BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.7 views

The vulnerability of the implementation of the IPv6 TCP/IP stack in the Trace protocol allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IPv6 TCP/IP implementation in the Trace stack is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS6.1AI score0.03371EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.9 views

The vulnerability of the implementation of the TCP/IP protocol stack allows a intruder to gain unauthorized access to protected information.

The vulnerability of the TCP/IP protocol stack implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

6.5CVSS6.8AI score0.02075EPSS
SaveExploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.6 views

The vulnerability of the implementation of the TCP/IP protocol stack allows a attacker to cause a service failure.

The vulnerability of the Stacked Protocols implementation of TCP/IP is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

4.3CVSS5.8AI score0.01899EPSS
SaveExploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.8 views

The vulnerability of the IPv4/ICMPv4 protocol stack in the Trace TCP/IP implementation allows a attacker to gain unauthorized access to protected information.

The vulnerability of the IPv4/ICMPv4 protocol stack in the TCP/IP stack is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

9.4CVSS8AI score0.18728EPSS
SaveExploits2References4Affected Software146
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.8 views

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.5AI score0.36965EPSS
SaveExploits3References4Affected Software146
BDU FSTEC
BDU FSTEC
added 2021/04/14 12:0 a.m.6 views

The vulnerability of the implementation of the TCP/IP protocol stack for the microprogrammable logic controller Modicon M218 lies in the ability to cause a service failure by writing beyond the buffer memory boundaries.

The vulnerability of the implementation of the TCP/IP protocol stack for the microprogrammable logic controller Modicon M218 lies in the writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the system...

7.8CVSS7.4AI score0.01525EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/04/13 12:0 a.m.3 views

PT-2021-2592 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the TCP/IP protocol stack in Microsoft Windows, which lacks sufficient protection of service data. This can allow a remote attacker to gain...

7.8CVSS6.2AI score0.06492EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2021/04/12 7:15 p.m.5 views

CVE-2021-3125

In TP-Link TL-XDR3230 1.0.12, TL-XDR1850 1.0.9, TL-XDR1860 1.0.14, TL-XDR3250 1.0.2, TL-XDR6060 Turbo 1.1.8, TL-XDR5430 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This...

7.5CVSS7.1AI score0.015EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.8 views

TP-Link TL-XDR 安全漏洞

The TP-Link TL-XDR is a series of routers from China's P&L TP-Link. A security vulnerability exists in multiple TP-Link routers that stems from a routing loop that occurs when using IPv6, resulting in excessive network traffic between the affected device and the upstream ISP's router. No detailed...

7.5CVSS5.5AI score0.015EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/04/12 12:0 a.m.8 views

Michael gargoyle 安全漏洞

Gargoyle OS is a Web management interface for small router devices. A security vulnerability exists in Gargoyle OS version 1.12.0 that stems from a routing loop that generates excessive network traffic between an affected device and the routers of its upstream ISP when IPv6 is used. No details of...

7.5CVSS5.5AI score0.01034EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.9 views

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software lies in the fact that the output operation goes beyond the buffer in memory, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a speciall...

8.5CVSS5.7AI score
SaveExploits0References3Affected Software16
AlpineLinux
AlpineLinux
added 2021/03/29 11:2 p.m.26 views

CVE-2021-29424

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses...

7.5CVSS5.6AI score0.02001EPSS
SaveExploits1
OSV
OSV
added 2021/03/29 4:15 p.m.2 views

CVE-2021-21727

A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:...

7.5CVSS7AI score0.01387EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/29 12:0 a.m.9 views

TP-Link Archer A7 安全漏洞

Tp-link TP-Link Archer A7 is a wireless router from China P&L Tp-link. A security vulnerability exists in the TP-Link Archer A7 prior to Archer C7USV5210125 and Archer A7USV5200220 AC1750 routers, which stems from a failure to properly filter IPv6 SSH connections. An attacker could exploit the...

9.3CVSS7.7AI score0.03215EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/03/29 12:0 a.m.5 views

ZTE ZXHN F623 安全漏洞

The ZTE ZXHN F623 is a wireless router from ZTE China. It is used to provide Internet access. A security vulnerability exists in the ZTE ZXHN F623, which can be exploited by an attacker to amplify traffic by sending a well-constructed IPv6 message to the affected device, ultimately resulting in a...

7.8CVSS7.4AI score0.01387EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/24 8:15 p.m.1 views

CVE-2021-1446

A vulnerability in the DNS application layer gateway ALG functionality used by Network Address Translation NAT in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected...

7.5CVSS7.1AI score0.01494EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2021/03/16 1:57 p.m.6 views

kernel: Geneve/IPsec traffic may be unencrypted between two Geneve endpoints

A flaw was found in the Linux kernel. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone in between the two endpoints to read the traffic unencrypted. The main threat from this...

7.5CVSS6.7AI score0.02433EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.11 views

The vulnerability in the implementation of the IPv6 protocol in the Trace TCP/IP stack allows a attacker to read arbitrary files.

The vulnerability of the IPv6 implementation in the Trace TCP/IP stack is related to insufficient validation of input data during packet processing. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

5.3CVSS7AI score0.01707EPSS
SaveExploits0References10Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.10 views

The vulnerability of the implementation of the IPv6 protocol in the Trace TCP/IP stack allows a attacker to cause a service failure.

The vulnerability of the IPv6 implementation in the Trace TCP/IP stack is related to insufficient validation of input data during packet processing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.5AI score0.01464EPSS
SaveExploits0References10Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.9 views

The vulnerability of the implementations of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) in Cisco IP telephones allows a perpetrator to trigger a system reboot and a service failure.

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implementations in IP-telephone microprogramming systems is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to trigger a device reboot and a service failure...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder