Lucene search
+L

1939 matches found

Tenable Nessus
Tenable Nessus
•added 2018/01/26 12:00 a.m.•63 views

Juniper Junos MAC Move Limit Traffic Handling Remote DoS (JSA10833)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106390; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/04/22...

8.8CVSS7.3AI score0.0072EPSS
SaveExploits0References2
OSV
OSV
•added 2018/01/10 10:29 p.m.•15 views

CVE-2018-0005

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

8.8CVSS5.8AI score0.0072EPSS
SaveExploits0References2
NVD
NVD
•added 2018/01/10 10:29 p.m.•35 views

CVE-2018-0005

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

8.8CVSS7.8AI score0.0072EPSS
SaveExploits0References2
Prion
Prion
•added 2018/01/10 10:29 p.m.•25 views

Design/Logic Flaw

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

5.8CVSS8.6AI score0.0072EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2018/01/10 10:00 p.m.•48 views

CVE-2018-0005 Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

7.4CVSS8.7AI score0.0072EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/10 12:00 a.m.•6 views

CVE-2018-0005: Improper Check for Unusual or Exceptional Conditions

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

8.8CVSS7.5AI score0.0072EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/01/10 12:00 a.m.•4 views

PT-2018-8558

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D40 Junos OS versions prior to 15.1X53-D55 Junos OS versions prior to 15.1R7 Description: A issue in QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded can cause the...

8.8CVSS0.0072EPSS
SaveExploits0References4
Zero Science Lab
Zero Science Lab
•added 2017/12/27 12:00 a.m.•88 views

Telesquare SKT LTE Router SDT-CS3B1 WebDAV HTTP Methods Arbitrary File Events

Summary We introduce SDT-CS3B1 LTE router which is a SKT 3G and 4G LTE wireless communication based LTE router product. Description WebDAV is enabled with directory listing and dangerous HTTP methods allowed: PROPFIND, DELETE, MKCOL, PUT, MOVE, COPY, PROPPATCH, LOCK and UNLOCK. The HTTP PUT metho...

9.8CVSS5.8AI score0.01039EPSS
SaveExploits2
Prion
Prion
•added 2017/11/17 2:29 a.m.•39 views

Design/Logic Flaw

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server...

7.5CVSS9.3AI score0.01212EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2017/11/17 2:29 a.m.•30 views

Design/Logic Flaw

October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server...

6.4CVSS7.7AI score0.01525EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2017/11/17 2:29 a.m.•34 views

CVE-2017-1000195

October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server...

7.5CVSS7.7AI score0.01525EPSS
SaveExploits0References1
NVD
NVD
•added 2017/11/17 2:29 a.m.•33 views

CVE-2017-1000197

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server...

9.8CVSS9.4AI score0.01212EPSS
SaveExploits0References1
OSV
OSV
•added 2017/11/17 2:29 a.m.•36 views

CVE-2017-1000195

October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server...

7.5CVSS7.1AI score
SaveExploits0References1
OSV
OSV
•added 2017/11/17 2:29 a.m.•30 views

CVE-2017-1000197

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server...

9.8CVSS6.8AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2017/11/17 2:00 a.m.•47 views

CVE-2017-1000195

October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server...

7.7AI score0.01525EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/11/17 2:00 a.m.•43 views

CVE-2017-1000197

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server...

9.5AI score0.01212EPSS
SaveExploits0References1
CVE
CVE
•added 2017/11/17 2:00 a.m.•88 views

CVE-2017-1000195

October CMS build 412 is vulnerable to PHP object injection in the asset move functionality, allowing an attacker to delete files on the server within the constraints of file permissions. The vulnerability is triggered through the asset handling path in October CMS, with documented remediation vi...

7.5CVSS7.7AI score0.01525EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2017/11/17 2:00 a.m.•81 views

CVE-2017-1000197

CVE-2017-1000197 affects October CMS 1.x build 412, where the asset move function allows file path modification, enabling creation of malicious files on the server. Root cause centers on insecure path handling during asset operations. NVD metrics show CVSSv2 7.5 (HIGH) and CVSSv3 9.8 (CRITICAL) w...

9.8CVSS9.4AI score0.01212EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2017/11/17 2:00 a.m.•2 views

CVE-2017-1000195

October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server...

8.7CVSS0.01525EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/17 12:00 a.m.•6 views

CVE-2017-1000195: Deserialization of Untrusted Data

October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the server...

7.5CVSS7.2AI score0.01525EPSS
SaveExploits0References2
Rows per page
Query Builder