Lucene search
K

483 matches found

OSV
OSV
added 2020/10/08 5:15 a.m.3 views

CVE-2020-3543

A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. The vulnerability is due to incorrect processin...

6.5CVSS6.6AI score0.00454EPSS
Exploits0References1
OSV
OSV
added 2020/10/08 5:15 a.m.5 views

CVE-2020-3544

A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute arbitrary code on an affected device or cause the device to reload. This vulnerability is due to missing checks when an I...

8.8CVSS7.6AI score0.00746EPSS
Exploits0References1
OSV
OSV
added 2020/10/06 2:15 p.m.3 views

CVE-2020-7465

The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted L2TP control packet with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service memory corruption...

9.8CVSS7.6AI score0.02947EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2020/09/29 7:0 p.m.8 views

Kernel: kvm: nVMX: L2 guest may trick the L0 hypervisor to access sensitive L1 resources

A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested=1 virtualization is enabled. In the instruction emulation, the L2 guest could trick the L0 hypervisor into accessing sensitive bits of the L1 hypervisor. An L2 guest could use this flaw to...

6.8CVSS7.1AI score0.00927EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2020/09/17 7:15 p.m.3 views

CVE-2020-0429

In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

6.7CVSS8.9AI score0.00176EPSS
Exploits0References2
OSV
OSV
added 2020/09/17 7:15 p.m.2 views

UBUNTU-CVE-2020-0429

In l2tpsessiondelete and related functions of l2tpcore.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

6.7CVSS6.9AI score0.00176EPSS
Exploits0References5
OSV
OSV
added 2020/09/08 10:15 a.m.4 views

CVE-2020-3702

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...

6.5CVSS6.9AI score
Exploits0References5
OSV
OSV
added 2020/09/08 10:15 a.m.7 views

DEBIAN-CVE-2020-3702

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...

6.5CVSS6.2AI score0.00343EPSS
Exploits0References1
OSV
OSV
added 2020/09/08 10:15 a.m.7 views

UBUNTU-CVE-2020-3702

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...

6.5CVSS6.7AI score0.00343EPSS
Exploits0References11
OSV
OSV
added 2020/08/27 4:15 p.m.5 views

CVE-2020-3415

A vulnerability in the Data Management Engine DME of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input...

8.8CVSS7.5AI score0.00761EPSS
Exploits0References1
OSV
OSV
added 2020/08/26 5:15 p.m.4 views

CVE-2020-3505

A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. The vulnerability is due to incorrect processin...

6.5CVSS6.6AI score0.00566EPSS
Exploits0References1
OSV
OSV
added 2020/08/26 5:15 p.m.3 views

CVE-2020-3506

Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to missing checks when t...

8.8CVSS6AI score0.00955EPSS
Exploits0References1
OSV
OSV
added 2020/08/26 5:15 p.m.3 views

CVE-2020-3507

Multiple vulnerabilities in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP camera. These vulnerabilities are due to missing checks when t...

8.8CVSS7.4AI score
Exploits0References1
OSV
OSV
added 2020/07/17 7:15 p.m.3 views

CVE-2020-1649

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of small fragments requiring reassembly,...

7.5CVSS7.1AI score0.01075EPSS
Exploits0References2
OSV
OSV
added 2020/07/17 7:15 p.m.5 views

CVE-2020-1651

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker...

6.5CVSS6.6AI score0.00454EPSS
Exploits0References1
OSV
OSV
added 2020/04/30 10:15 p.m.6 views

CVE-2020-5888

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition VE may expose a mechanism for adjacent network layer 2 attackers to access local daemons and bypass port lockdown settings...

8.1CVSS7.3AI score0.00574EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.6 views

A VPN connection through a third-party VPN server disconnects after an hour on a Windows-based computer

A VPN connection through a third-party VPN server disconnects after an hour on a Windows-based computer Symptoms On a computer that is running Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 8, Windows RT, or Windows Server 2012, you establish a Layer 2 Tunneling Protocol/Internet...

6.3AI score
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.8 views

"0x0000009F" Stop error when a Windows VPN client computer is shutdown with an active L2TP VPN connection

"0x0000009F" Stop error when a Windows VPN client computer is shutdown with an active L2TP VPN connection This article describes a 0x9F Stop error that occurs in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you install...

6.4AI score
Exploits0
SonicWall
SonicWall
added 2020/02/27 10:0 p.m.13 views

Kr00k WiFi Vulnerability

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

3.1CVSS6.2AI score0.07709EPSS
Exploits9
OSV
OSV
added 2020/02/26 5:15 p.m.5 views

CVE-2020-3172

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on an affected device. The vulnerability exists because of...

8.8CVSS7.8AI score0.02044EPSS
Exploits0References1
Rows per page
Query Builder