OPNsense core authorization issue vulnerability

Versions 26.1.6 through 26.7.7 of OPNsense Core contain an authorization vulnerability. This vulnerability stems from an authentication bypass in the mandatory portal roaming feature. Unauthenticated attackers can observe MAC-to-IP mappings by forging MAC addresses and sending forged free ARP...

CVE-2026-73443: Authentication Bypass by Capture-replay

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefinitely. Replayed advertisements can be...

EUVD-2021-14600

Malware in sbrugna...

EUVD-2021-14592

Malware in sbrugna...

EUVD-2016-7396

Malware in sbrugna...

EUVD-2021-14591

Malware in sbrugna...

EUVD-2024-37786

Malicious code in bioql PyPI...

passt bug fix update

An update is available for passt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list passt implements a translation layer between a Layer-2 network interface and...

CVE-2021-27861

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...

Code injection

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and optionally VLAN0 headers...

CVE-2021-27862: Improper Handling of Length Parameter Inconsistency

Layer 2 network filtering capabilities such as IPv6 RA guard can be bypassed using LLC/SNAP headers with invalid length and Ethernet to Wifi frame conversion and optionally VLAN0 headers...

Code injection

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based...

CVE-2020-8299

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based...

CVE-2020-8299: Uncontrolled Resource Consumption

Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based...

PT-2021-12728

Name of the Vulnerable Software and Affected Versions: Citrix ADC and Citrix/NetScaler Gateway versions 13.0 before 13.0-76.29 Citrix ADC and Citrix/NetScaler Gateway versions 12.1-61.18 Citrix ADC and Citrix/NetScaler Gateway versions 11.1-65.20 Citrix ADC 12.1-FIPS versions before 12.1-55.238...

CVE-2021-0257

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

PT-2017-9523

Name of the Vulnerable Software and Affected Versions Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families versions prior to 22.0 Description The issue concerns a denial of service in certain layer 2 network configurations. Recommendations For versions prior to 22.0, update...

CVE-2016-8105: Undefined Security Weakness

Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families before version 22.0 are vulnerable to a denial of service in certain layer 2 network configurations...

CVE-2016-6473: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm. More Information: CSCuu69332, CSCux07028. Known Affected Releases: 15.23E. Known Fixed Releases: 12.250SE4 12.250SE5 12.250SQ5...