CVE-2026-102063

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF...

CVE-2026-102011 Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors or one neighbor duplicated by an L2 loop advertise the same transport address ...

CVE-2026-102063 Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF...

CVE-2026-102063

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS on MX Series routers allows an unauthenticated network attacker to cause a denial of service . The crash is triggered via an eBGP route update when HFRR link protection is configured within a VRF...

EUVD-2026-101433

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF...

CVE-2026-102063 Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF...

PT-2026-113903

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF...

CVE-2026-102063: Reachable Assertion

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF...

CVE-2023-54237

CVE-2023-54237 affects the Linux kernel component net/smc. The description notes a vulnerability where smc_llc_srv_add_link() lacks protection when the server creates a second link, potentially adding a link to a link group and breaking the security environment protected by llc_conf_mutex, which ...

EUVD-2025-14803

Malicious code in bioql PyPI...

EUVD-2022-33569

Malicious code in bioql PyPI...

CVE-2025-30653 Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash

An Expired Pointer Dereference vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause Denial of Service DoS.On all Junos OS and Junos OS Evolved platforms, when an MPLS Label-Switched Path LSP is...

CVE-2025-30371

Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8 are vulnerable to circumvention of local link access protection in GeoJson endpoint. Self hosted Metabase instances that are using the GeoJson feature could be potential...

CVE-2025-30371 Metabase vulnerable to circumvention of local link access protection in GeoJson endpoint

Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8 are vulnerable to circumvention of local link access protection in GeoJson endpoint. Self hosted Metabase instances that are using the GeoJson feature could be potential...

SUSE CVE-2022-48662

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Really move i915gemcontext.link under ref protection i915perf assumes that it can use the i915gemcontext reference to protect its i915-gem.contexts.list iteration. However, this requires that we do not remove the...

node-tar post-link vulnerability

node-tar is a software package for file compression/decompression. A backlink vulnerability exists in node-tar, which is an arbitrary file creation/overwrite vulnerability that stems from insufficient symbolic link protection...

CVE-2021-23240

A race condition vulnerability was found in the temporary file handling of sudoedit's SELinux RBAC support. On systems where SELinux is enabled, this flaw allows a malicious user with sudoedit permissions to set the owner of an arbitrary file to the user ID of the target user, potentially leading...

HackerOne: Changing Victim's JIRA Integration Settings Through Multiple Bugs

Summary: Changing victim's JIRA integration settings through multiple bugs. Description: Using multiple HackerOne bugs, an attacker can change the victim's JIRA integration settings. Bugs: 1 The Jira integration consent screen lacks information about the Jira project that will be connected to...