Lucene search
+L

111 matches found

Tenable Nessus
Tenable Nessus
added 2020/04/30 12:0 a.m.31 views

F5 Networks BIG-IP : BIG-IP SSL state mirroring vulnerability (K17663061)

BIG-IP systems set up for connection mirroring in a high availability HA pair transfersensitive cryptographic objects over an insecure communications channel. This is a control plane issue which is exposed only on the network used for connection mirroring.CVE-2020-5885 Impact On-path attackers ma...

9.1CVSS8.2AI score0.00809EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/04/30 12:0 a.m.31 views

F5 Networks BIG-IP : BIG-IP SSL state mirroring vulnerability (K65720640)

BIG-IP systems setup for connection mirroring in a High Availability HA pair transfers sensitive cryptographic objects over an insecure communications channel. This is a control plane issue which is exposed only on the network used for connection mirroring.CVE-2020-5886 Impact On-path attackers m...

9.1CVSS8.2AI score0.00809EPSS
Exploits0References2
OSV
OSV
added 2020/04/24 2:15 p.m.6 views

CVE-2020-5869

In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit...

9.1CVSS7.3AI score0.00485EPSS
Exploits0References1
Prion
Prion
added 2020/04/24 2:15 p.m.25 views

Path traversal

In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit...

6.4CVSS8.9AI score0.00485EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/04/24 1:5 p.m.57 views

CVE-2020-5869

CONTEXT: CVE-2020-5869 affects F5 BIG-IQ HA synchronization. Affected software: BIG-IQ 5.2.0–7.0.0. ROOT CAUSE: TLS protection for HA sync is not secure, enabling potential on-path interception or tampering of confidential data in transit. IMPACT: confidentiality and integrity of BIG-IQ HA data m...

9.1CVSS9AI score0.00485EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2019/10/17 8:15 p.m.25 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.3AI score0.01262EPSS
Exploits0References3
OSV
OSV
added 2019/10/17 8:15 p.m.4 views

ALPINE-CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.5AI score0.01262EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2019/10/17 7:17 p.m.63 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.5AI score0.01262EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2019/10/17 7:17 p.m.67 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.3AI score0.01262EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2019/10/16 12:0 a.m.33 views

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

7.5CVSS6.8AI score0.01262EPSS
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.11 views

Alsaplayer 0.99.71 Local Buffer Overflow Vulnerablity

No description provided by source. source: http://www.securityfocus.com/bid/5767/info Alsaplayer is a PCM player that utilizes the ALSA libraries and drivers. It is availabe for Linux and Unix platforms. A vulnerability has been discovered in Alsaplayer. By specifying an overly long add-on path, ...

7.1AI score
Exploits0
Rows per page
Query Builder