Lucene search
+L

370 matches found

ATTACKERKB
ATTACKERKB
added 2020/10/16 12:0 a.m.204 views

CVE-2020-16898 aka Bad Neighbor / Ping of Death Redux

A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an...

8.8CVSS9.1AI score0.58961EPSS
SaveIn wildExploits19References6
OpenVAS
OpenVAS
added 2020/10/14 12:0 a.m.33 views

Microsoft Windows Multiple Vulnerabilities (KB4577668)

This host is missing a critical security update according to Microsoft KB4577668 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.4AI score0.13348EPSS
SaveExploits12References2
Qualys Blog
Qualys Blog
added 2020/10/13 6:52 p.m.220 views

October 2020 Patch Tuesday – 87 Vulnerabilities, 11 Critical, SharePoint, TCP/IP Stack, Graphics, Adobe Vulns

This month’s Microsoft Patch Tuesday addresses 87 vulnerabilities with 11 of them labeled as Critical. The 11 Critical vulnerabilities cover TCP/IP Stack, SharePoint, Windows Camera Codec Pack, Graphics and several other workstation vulnerabilities. Adobe issued patches today for Adobe Flash...

6.8CVSS2.2AI score0.70894EPSS
SaveExploits18
Tenable Nessus
Tenable Nessus
added 2020/10/13 12:0 a.m.235 views

KB4579311: Windows 10 Version 2004 October 2020 Security Update

The remote Windows host is missing security update 4579311. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

9.3CVSS7.9AI score0.13348EPSS
SaveExploits12References51
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.8 views

PT-2020-4249 · Microsoft · Windows Tcp/Ip Stack +1

Name of the Vulnerable Software and Affected Versions: Windows TCP/IP stack affected versions not specified Description: A remote code execution issue exists due to improper handling of ICMPv6 Router Advertisement packets by the Windows TCP/IP stack. This allows an attacker to execute arbitrary...

10CVSS9.6AI score0.09765EPSS
SaveExploits12References39
NCSC
NCSC
added 2020/09/09 12:0 a.m.5 views

Vulnerabilities fixed in IP stack of various SIEMENS products

Siemens has fixed two vulnerabilities in the Linux IP stack of various industrial products. An unauthenticated malicious person could exploit the vulnerabilities to cause a denial-of-service cause. The malicious party must have access to the production network. It is good practice not to have suc...

7.8CVSS6.8AI score0.7372EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/08/12 12:0 a.m.134 views

Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020 (cisco-sa-treck-ip-stack-JyBQ5GyC)

According to its self-reported version, Cisco ASR and Virtual Packet Core StarOS software is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and...

10CVSS6.9AI score0.36965EPSS
SaveExploits21References21
OpenVAS
OpenVAS
added 2020/07/30 12:0 a.m.346 views

lwIP TCP/IP Stack Detection (HTTP)

HTTP based detection of the lwIP TCP/IP stack. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.3AI score
SaveExploits0References1
Qualys Blog
Qualys Blog
added 2020/06/24 11:24 p.m.374 views

Ripple20: Multiple Vulnerabilities Identified in Treck TCP/IP Stack

Multiple vulnerabilities that use a low-level TCP/IP software library developed by Treck, Inc. were identified recently in implementations of the Treck IP stack for embedded systems. These vulnerabilities were discovered by the JSOF research lab and have been named Ripple20. Ripple20...

10CVSS1AI score0.36965EPSS
SaveExploits17
OpenVAS
OpenVAS
added 2020/06/24 12:0 a.m.94 views

Xerox Printers Multiple Vulnerabilities - Ripple20 (XRX20J)

Xerox printers are prone to multiple vulnerabilities in the Treck IP Stack Ripple20. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

10CVSS6.4AI score0.36965EPSS
SaveExploits21References6
OpenVAS
OpenVAS
added 2020/06/24 12:0 a.m.181 views

HP Printers Multiple Vulnerabilities - Ripple20 (HPSBPI03666)

Multiple HP printers are vulnerable to multiple vulnerabilities in the Treck IP stack Ripple20. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

10CVSS6.1AI score0.36965EPSS
SaveExploits17References6
CheckPoint Security
CheckPoint Security
added 2020/06/20 12:0 a.m.47 views

Check Point Response to Ripple20 Vulnerabilities

Symptoms - On June 16, 2020, CERT published vulnerabilities in the Treck IP Stack with the following CVEs: CVE-2020-11896, CVE-2020-11897, CVE-2020-11898, CVE-2020-11899, CVE-2020-11900, CVE-2020-11901, CVE-2020-11902, CVE-2020-11903, CVE-2020-11904, CVE-2020-11905, CVE-2020-11906, CVE-2020-11907...

10CVSS6.5AI score0.36965EPSS
SaveExploits21
Cisco
Cisco
added 2020/06/17 8:0 p.m.124 views

Multiple Vulnerabilities in Treck IP Stack Affecting Cisco Products: June 2020

A set of previously unknown vulnerabilities on the Treck IP stack implementation were disclosed on June 16, 2020. The vulnerabilities are collectively known as Ripple20. Exploitation of these vulnerabilities could result in remote code execution, denial of service DoS, or information disclosure,...

10CVSS0.6AI score0.36965EPSS
SaveExploits21References1
NVD
NVD
added 2020/06/17 11:15 a.m.23 views

CVE-2020-11911

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control...

5.3CVSS0.03149EPSS
SaveExploits1References10
NVD
NVD
added 2020/06/17 11:15 a.m.12 views

CVE-2020-11914

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read...

4.3CVSS0.01657EPSS
SaveExploits1References10
NVD
NVD
added 2020/06/17 11:15 a.m.18 views

CVE-2020-11910

The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read...

9.8CVSS0.10934EPSS
SaveExploits1References9
NVD
NVD
added 2020/06/17 11:15 a.m.11 views

CVE-2020-11913

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read...

5.3CVSS0.03336EPSS
SaveExploits1References9
NVD
NVD
added 2020/06/17 11:15 a.m.14 views

CVE-2020-11912

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read...

5.3CVSS0.04521EPSS
SaveExploits1References10
NVD
NVD
added 2020/06/17 11:15 a.m.16 views

CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...

4.3CVSS0.01899EPSS
SaveExploits1References9
NVD
NVD
added 2020/06/17 11:15 a.m.20 views

CVE-2020-11897

The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets...

10CVSS0.09141EPSS
SaveExploits0References8
Rows per page
Query Builder