19460 matches found
CVE-2024-21586 Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series and NFX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If an affected device receives specific valid...
Model Extraction from Neural Networks
A new paper, "Polynomial Time Cryptanalytic Extraction of Neural Network Models," by Adi Shamir and others, uses ideas from differential cryptanalysis to extract the weights inside a neural network using specific queries and their results. This is much more theoretical than practical, but its a...
Juniper Networks Releases Critical Security Update for Routers
Juniper Networks has released out-of-band security updates to address a critical security flaw that could lead to an authentication bypass in some of its routers. The vulnerability, tracked as CVE-2024-2973, carries a CVSS score of 10.0, indicating maximum severity. "An Authentication Bypass Usin...
CVE-2024-2973
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only routers or conductors that are running i...
CVE-2024-2973 Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only routers or conductors that are running i...
CVE-2024-2973
CVE-2024-2973 affects Juniper Session Smart Router (SSR), Session Smart Conductor, and WAN Assurance Router when deployed in High-Availability redundant configurations. The vulnerability is an Authentication Bypass via an alternate path or channel that lets a network-based attacker bypass authent...
CVE-2024-2973 Session Smart Router(SSR): On redundant router deployments API authentication can be bypassed
An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only routers or conductors that are running i...
ThroughTek Kalay P2P SDK Improper Access Control (CVE-2021-28372)
ThroughTek's Kalay Platform 2.0 network allows an attacker to impersonate an arbitrary ThroughTek TUTK device given a valid 20-byte uniquely assigned identifier UID. This could result in an attacker hijacking a victim's connection and forcing them into supplying credentials needed to access the...
The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, stems from a lack of a mechanism for verifying the source of information. This allows attackers to compromise the integrity and accessibility of the system.
The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, is related to a lack of mechanisms for verifying the source of information. Exploiting this vulnerability could allow attackers to compromise the integrity and...
Malicious code in Blockcore.Networks.Molіе (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockcore.Nеtwоrks.BCP (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4321 Malicious code in Blockcore.Nеtwоrks.BCP (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4323 Malicious code in Blockcorе.Networks.Bitcoiո (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockcorе.Networks.Bitcoiո (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockcorе.Nеtworks.Strax (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4325 Malicious code in Blockcorе.Nеtworks.Strax (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockcorе.Nеtworks.Strах (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4326 Malicious code in Blockcorе.Nеtworks.Strах (NuGet)
--- -= Per source details. Do not edit below this line.=-...