Lucene search
+L

11110 matches found

OSV
OSV
added 2021/07/17 6:15 p.m.6 views

UBUNTU-CVE-2021-32574

HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1...

7.5CVSS7.1AI score0.01457EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/07/17 6:15 p.m.7 views

CVE-2021-36213

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action cancels out, causing the intention to incorrectly fail open, allowing L4 traffic. Fixed in 1.9.8 and 1.10.1...

7.5CVSS5.9AI score0.0174EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/07/17 12:00 a.m.6 views

PT-2021-21178 · Hashicorp · Hashicorp Consul +1

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul and Consul Enterprise versions 1.9.0 through 1.10.0 Description: The issue arises when a default deny policy with a single L7 application-aware intention deny action is used, causing the intention to incorrectly fail open and...

7.5CVSS7.6AI score0.0174EPSS
SaveExploits0References20
CNNVD
CNNVD
added 2021/07/17 12:00 a.m.22 views

Hashicorp HashiCorp Consul 输入验证错误漏洞

Hashicorp HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp Hashicorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. HashiCorp Consul and Consul Enterprise suffers from an input...

7.5CVSS7.4AI score0.0174EPSS
SaveExploits0References8
Microsoft CVE
Microsoft CVE
added 2021/07/16 7:00 a.m.11 views

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0 1.10.3 17.03.0 17.03.1 17.03.2 17.06.0 17.06.1 17.06.2 17.09.0 and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload aka gzip bombing.

...

6.5CVSS7AI score0.0245EPSS
SaveExploits0
Citrix
Citrix
added 2021/07/16 12:00 a.m.10 views

Citrix App Layering | Adding version to OS Layer failing with error "Failed to duplicate layer. Please ensure that Windows was shut down properly."

Adding version to OS Layer failing with error "Failed to duplicate layer. Please ensure that Windows was shut down properly". Screenshot of the error: On the ELM logs, we would see the below errors: 2021-07-14 09:20:34,824 INFO DefaultPool2 CopyPartitionByNtfsCloneJobStep: Cloning NTFS from block...

7AI score
SaveExploits0
OSV
OSV
added 2021/07/15 8:15 p.m.11 views

CVE-2021-0277

An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved may allow an attacker to cause a Denial of Service DoS, or may lead to remote code execution RCE. Continued receipt...

8.8CVSS7.7AI score0.00652EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/15 8:15 p.m.23 views

Design/Logic Flaw

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

3.3CVSS6.5AI score0.00381EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/07/15 6:15 p.m.10 views

CVE-2020-11633

The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers. An adversary would potentially have been able to execute arbitrary code with system privileges...

9.8CVSS6.4AI score0.01891EPSS
SaveExploits0References1
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/07/15 5:10 a.m.254 views

What is DDoS attack❓ — Types and how to react to them

What is DDoS attack❓ — Types and how to react to them Distributed Denial of service attacks are assaults outfitted at making a PC, a cyber-service inaccessible by congesting it with traffic from various sources. The point is ordinarily to make the computers in question stop administration by...

0.1AI score
SaveExploits0
CNNVD
CNNVD
added 2021/07/15 12:00 a.m.9 views

Juniper Networks Junos OS 和 Junos OS Evolved 缓冲区错误漏洞

Juniper Networks Junos OS and Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system for the company's hardware devices. Juniper Networks Junos OS is a network operating system for the company's hardware devices that provides a secure...

8.8CVSS7.8AI score0.00652EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/14 9:30 p.m.68 views

Security Bulletin: Vulnerability in SSLv3 affects FileNet Content Manager, FileNet BPM and IBM Content Foundation (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is a configurable option in FileNet Content Manager and FileNet BPM products. If using SSLv3 with these products, please refer to the sections below to...

4.3CVSS4.2AI score0.99999EPSS
SaveExploits7Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/07/14 4:00 p.m.6 views

CVE-2021-0277

An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS and Junos OS Evolved may allow an attacker to cause a Denial of Service DoS, or may lead to remote code execution RCE. Continued receipt...

8.8CVSS8.1AI score0.00652EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/07/13 11:15 a.m.6 views

CVE-2021-31892

A vulnerability has been identified in SINUMERIK Analyse MyCondition All versions, SINUMERIK Analyze MyPerformance All versions, SINUMERIK Analyze MyPerformance /OEE-Monitor All versions, SINUMERIK Analyze MyPerformance /OEE-Tuning All versions, SINUMERIK Integrate Client 02 All versions =...

7.4CVSS7AI score0.00486EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.13 views

Vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations in Cisco Video Surveillance IP cameras of the 7000 series; device reboot or service failure

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.10 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Video Surveillance devices of the 7000 series allows a intruder to induce slow memory leaks, restart the device, or cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Video Surveillance devices of the 7000 series relates to a memory leak. Exploiting this vulnerability can allow an attacker to cause a slow memory leak, a device reboot, or a service failure...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.10 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Video Surveillance devices of the 7000 series allows a intruder to induce slow memory leaks, restart the device, or cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Video Surveillance devices of the 7000 series is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a slow memory leak, a device reboot, or a service failure...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.11 views

Vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations in Cisco Video Surveillance IP cameras of the 7000 series; device reboot or service failure

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.13 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Video Surveillance devices of the 7000 series allows a intruder to induce slow memory leaks, restart the device, or cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Video Surveillance devices of the 7000 series relates to a memory leak. Exploiting this vulnerability can allow an attacker to cause a slow memory leak, a device reboot, or a service failure...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.13 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Video Surveillance devices of the 7000 series allows a intruder to induce slow memory leaks, restart the device, or cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Video Surveillance devices of the 7000 series relates to a memory leak. Exploiting this vulnerability can allow an attacker to cause a slow memory leak, a device reboot, or a service failure...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder