1644 matches found
Design/Logic Flaw
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network...
The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System (NCS) 4000 Series routers allows a attacker to cause service interruptions.
The vulnerability of the TL1 protocol implementation in Cisco IOS XR Network Convergence System NCS 4000 Series routers is related to uncontrolled memory allocation. Exploiting this vulnerability can allow an attacker to cause service failures...
Remote code execution
Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...
Important: java-11-openjdk
Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficul...
swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding
A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoded header block. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.1. It is fixed in 1.19.2 and later releases. There are a number of...
cybernetwork.ch Cross Site Scripting vulnerability OBB-3339880
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-0858
Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger unauthorized access to the product. :Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier...
Information disclosure
SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over the network. This could allow an unauthenticated attacker with deep knowledge to gain sensitive information such as user credentials and domain names, which...
CVE-2023-28762 Information Disclosure in SAP BusinessObjects Intelligence Platform
SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platform resulting int...
OpenJDK: missing string checks for NULL characters (8296622)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to explo...
CVE-2023-21911
CVE-2023-21911 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.32 and earlier. The advisory states the issue allows a high-privilege attacker, over the network via multiple protocols, to cause a hang or crash (complete DoS) of MySQL Server. Exploitation details are not provided ...
PT-2023-16599 · Lenovo · Lenovo Smart Clock Essential
Name of the Vulnerable Software and Affected Versions: Lenovo Smart Clock Essential with Alexa Built In affected versions not specified Description: A default password in the device could allow unauthorized access to an attacker with local network access. Recommendations: At the moment, there is ...
CVE-2023-30769
Removed by vendor...
CVE-2023-28842
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...
RHEL 8 : gnutls (RHSA-2023:1569)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1569 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS...
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection...
CVE-2022-27642
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service. The issue results from incorrect...
CVE-2022-43632
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
CVE-2022-22512 VARTA: Multiple devices prone to hard-coded credentials
Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network...
