11074 matches found
CVE-2023-36839
The CVE-2023-36839 issue affects Juniper Networks Junos OS and Junos OS Evolved. Affected component: Layer-2 control protocols daemon (l2cpd). Root cause: Improper validation of specified quantity in input, triggered by specific LLDP packets from an unauthenticated adjacent attacker, leading to a...
Juniper Networks Junos OS and Junos OS Evolved Security Vulnerabilities
Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system designed for use with the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...
Line Trust management vulnerabilities
Line is the instant messaging platform of Line Corporation. A security vulnerability exists in Line prior to version 13.16.0 iOS, which stems from a lack of TLS certificate validation for log transfers in the Finance module of the Line Client...
Mozilla NSS Security Vulnerability
NSS is an underlying cryptography library from the Mozilla Foundation. The library supports a variety of cryptographic algorithms, and the Firefox browser's TLS implementation is based on this library. A security vulnerability exists in Mozilla NSS, which arises when the numeric library for RSA...
Microsoft patches 12 critical vulnerabilities, nine of which are in Layer 2 Tunneling Protocol
Microsoft disclosed 104 vulnerabilities in its extensive range of software and services, the most in a single Patch Tuesday since July. What is most notable is that this batch of vulnerabilities includes 12 that are considered "critical," nine of which are remote code execution vulnerabilities in...
An issue was discovered in Python before 3.8.18 3.9.x before 3.9.18 3.10.x before 3.10.13 and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created receives data into the socket buffer and then is closed quickly there is a brief window where the SSLSocket instance will detect the socket as "not connected" and won't initiate a handshake but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)
...
Microsoft Windows Multiple Vulnerabilities (KB5031354)
This host is missing a critical security update according to Microsoft KB5031354 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-6307 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S5 Junos OS versions prior to 21.1R3-S4 Junos OS versions prior to 21.2R3-S4 Junos OS versions prior to 21.3R3-S3 Junos OS versions prior to 21.4R3-S2 Junos OS versions prior to 22.1R2-S2, 22.1R3 Junos OS...
CVE-2023-41773
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41767
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41769
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41773
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41768
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41767
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-38166
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41774
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41768
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...
CVE-2023-41771
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability...