Lucene search
+L

150 matches found

CNVD
CNVD
added 2023/03/16 12:0 a.m.337 views

Microsoft Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

Microsoft Internet Control Message Protocol ICMP is a remote code execution vulnerability in Microsoft Internet Control Message Protocol ICMP, an ICMP protocol used in Windows. A remote code execution vulnerability exists in Microsoft Internet Control Message Protocol ICMP, which could be exploit...

9.8CVSS3.1AI score0.03479EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:0 a.m.9 views

The vulnerability in the implementation of the ICMP protocol in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ICMP protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.03479EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/14 5:15 p.m.29 views

CVE-2023-23415

Internet Control Message Protocol ICMP Remote Code Execution Vulnerability...

9.8CVSS9.7AI score0.03479EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2023/03/14 12:0 a.m.307 views

KLA48553 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...

9.8CVSS9.9AI score0.78152EPSS
SaveExploits1References72
SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.8 views

SUSE CVE-2004-1011

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long 1 PROXY or 2 LOGIN command, a different vulnerability than CVE-2004-1015...

10CVSS8.5AI score0.05843EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:7 a.m.6 views

SUSE CVE-2008-2829

phpimap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c legacy routine buffer overflow" error message, related...

5CVSS8.1AI score0.05265EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:15 a.m.6 views

SUSE CVE-2015-6496

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service crash via a 1 DCCP, 2 SCTP, or 3 ICMPv6 packet...

5CVSS6.8AI score0.03202EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.10 views

The vulnerability in the implementation of the ICMP protocol in Linux kernel allows a attacker to access confidential information.

The vulnerability of the ICMP kernel in the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

8.8CVSS6.6AI score0.06846EPSS
SaveExploits0References22Affected Software6
ATTACKERKB
ATTACKERKB
added 2022/05/04 2:0 p.m.5 views

CVE-2022-26071

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

7.5CVSS7.1AI score0.01032EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.17 views

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing ICMP packet headers. This vulnerability allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing ICMP packet headers. Exploiting this vulnerability can allow a remote attacker to gain access to protected...

9.4CVSS7.8AI score0.01902EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2022/02/18 6:15 p.m.1 views

DEBIAN-CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

7.4CVSS6.5AI score0.06846EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.10 views

The vulnerability in the web interface of the microprogramming software for Cisco Analog Telephone Adapter (ATA) model 190 allows a perpetrator to cause a service failure.

The vulnerability of the web interface of the microprogramming software for Cisco Analog Telephone Adapter ATA series 190 devices is related to deficiencies in rate-limiting mechanisms when sending ICMP packets. Exploiting this vulnerability could allow a malicious actor to cause service...

7.8CVSS7.2AI score0.01882EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2021/11/12 11:3 a.m.9 views

OESA-2021-1429 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An improper validation of an array index and out of bounds memory read in the Linux kernel s Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this fl...

7.8CVSS6.5AI score0.06846EPSS
SaveExploits2References10
OSV
OSV
added 2021/10/19 12:0 a.m.5 views

UBUNTU-CVE-2021-20322

A flaw in the processing of received ICMP errors ICMP fragment needed and ICMP redirect in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest...

7.4CVSS6.7AI score0.06846EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2021/10/06 12:0 a.m.278 views

High Infinity Technology HiKam S6 1.3.26 Spoofing / Broken Authentication

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Critical Vulnerabilities product: High Infinity Technology HiKam S6 vulnerable version: =1.3.26 fixed version: CVE number: impact: Critical homepage:...

SaveExploits0
OSV
OSV
added 2021/09/29 8:15 p.m.12 views

DEBIAN-CVE-2021-22947

When curl = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instea...

5.9CVSS6.5AI score0.03009EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:0 a.m.9 views

The vulnerability in the implementation of the ICMP checksum protocol for TCP/IP implementations like NicheLite and InterNiche allows a attacker to cause a service failure.

The vulnerability of the ICMP checksum implementation in TCP/IP implementations like NicheLite and InterNiche is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.5AI score0.02287EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2021/08/30 6:15 a.m.3 views

UBUNTU-CVE-2021-39272

Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH...

5.9CVSS5.8AI score0.00925EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/08/26 12:0 a.m.30 views

PT-2021-7066 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the processing of received ICMP errors, specifically ICMP fragment needed and ICMP redirect, allows an off-path remote user to quickly scan open UDP ports and bypass the sour...

9.8CVSS7.8AI score0.92621EPSS
SaveExploits349References1704
OSV
OSV
added 2021/08/10 3:15 p.m.7 views

UBUNTU-CVE-2021-38372

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS...

3.7CVSS5.8AI score0.00788EPSS
SaveExploits1References4
Rows per page
Query Builder