Lucene search
+L

1436 matches found

Prion
Prion
added 2023/01/13 12:15 a.m.27 views

Race condition

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service DoS. When an inconsistent "deterministic NAT" configuration is present on an SRX, or MX with SPC3 and then a...

1.7CVSS5.6AI score0.00174EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/01/12 12:0 a.m.37 views

CVE-2023-22409 Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service DoS. When an inconsistent "deterministic NAT" configuration is present on an SRX, or MX with SPC3 and then a...

5.5CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/01/12 12:0 a.m.9 views

CVE-2023-22409 Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service DoS. When an inconsistent "deterministic NAT" configuration is present on an SRX, or MX with SPC3 and then a...

5.5CVSS6.8AI score0.00174EPSS
SaveExploits0References1
CVE
CVE
added 2023/01/12 12:0 a.m.60 views

CVE-2023-22409

This CVE concerns Juniper Networks Junos OS NAT functionality where an unchecked input for a loop condition in the NAT library can crash SPC3 on SRX/MX devices, causing a DoS when an inconsistent deterministic NAT configuration is used and a specific CLI command is executed. The issue is triggere...

5.5CVSS5.6AI score0.00174EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/11 12:0 a.m.9 views

PT-2023-1288 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S6 Juniper Networks Junos OS versions prior to 20.3R3-S6 Juniper Networks...

5.5CVSS5.5AI score0.00174EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/01/03 12:0 a.m.16 views

Cisco IOS XE Software Rate Limiting Network Address Translation DoS (cisco-sa-ratenat-pYVLA7wM) Unpatched Commands

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Rate Limiting Network Address Translation NAT feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco...

8.6CVSS7.8AI score0.01328EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/01/03 12:0 a.m.28 views

Cisco IOS XE Software Rate Limiting Network Address Translation DoS (cisco-sa-ratenat-pYVLA7wM)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Rate Limiting Network Address Translation NAT feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco...

8.6CVSS7.8AI score0.01328EPSS
SaveExploits0References4
0day.today
0day.today
added 2022/12/30 12:0 a.m.344 views

Hughes Satellite Router Remote File Inclusion Cross Frame Scripting Vulnerability

Hughes Satellite Router contains a cross-frame scripting via remote file inclusion vulnerability that may potentially be exploited by malicious users to compromise an affected system. This vulnerability may allow an unauthenticated malicious user to misuse frames, include JS/HTML code and steal...

7AI score
SaveExploits0
OSV
OSV
added 2022/12/23 3:15 p.m.4 views

DEBIAN-CVE-2022-23547

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...

9.8CVSS8.6AI score0.00945EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/20 7:15 p.m.3 views

UBUNTU-CVE-2022-23537

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects...

9.8CVSS7.2AI score0.01026EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/20 3:15 p.m.8 views

CVE-2022-46545

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting...

7.5CVSS6.2AI score0.00815EPSS
SaveExploits1References1
OSV
OSV
added 2022/12/20 3:15 p.m.4 views

CVE-2022-46542

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat...

7.5CVSS6.2AI score0.00815EPSS
SaveExploits1References1
OSV
OSV
added 2022/12/08 4:15 p.m.8 views

CVE-2022-45516

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting...

7.5CVSS5.9AI score0.00859EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.7 views

PT-2022-27557 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered, which can be triggered via the entries parameter at the "/goform/addressNat" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider...

7.5CVSS7.4AI score0.00859EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/12/08 12:0 a.m.8 views

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a page parameter via /goform/NatStaticSetting containing a stack overflow...

7.5CVSS7.5AI score0.00859EPSS
SaveExploits1References2
OSV
OSV
added 2022/12/02 6:15 p.m.3 views

CVE-2022-45653

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the page parameter in the fromNatStaticSetting function...

7.5CVSS6.2AI score0.00815EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/02 12:0 a.m.7 views

Tenda AC6 安全漏洞

Tenda AC6 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC6V1.0 V15.03.05.19, which originates from a buffer overflow vulnerability via the page parameter in the fromNatStaticSetting function...

7.5CVSS7.7AI score0.00815EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.7 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.3AI score0.01914EPSS
SaveExploits0References3
NVD
NVD
added 2022/11/09 10:15 p.m.23 views

CVE-2022-41058

Windows Network Address Translation NAT Denial of Service Vulnerability...

7.5CVSS0.01914EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/11/09 10:15 p.m.4 views

CVE-2022-41058

Windows Network Address Translation NAT Denial of Service Vulnerability...

7.5CVSS7.2AI score0.01914EPSS
SaveExploits0References3Affected Software26
Rows per page
Query Builder