Lucene search
+L

1838 matches found

OSV
OSV
•added 2023/10/11 10:15 p.m.•12 views

CVE-2023-44190

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded ...

5.4CVSS5.8AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/11 10:15 p.m.•18 views

CVE-2023-44189

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to...

5.4CVSS5.8AI score0.0018EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/11 10:15 p.m.•30 views

Input validation

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to...

4.8CVSS5.5AI score0.0018EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/10/11 10:15 p.m.•29 views

Input validation

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded ...

4.8CVSS5.5AI score0.00166EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/11 9:04 p.m.•79 views

CVE-2023-44190

CVE-2023-44190 concerns an Origin Validation vulnerability in MAC address validation on Juniper Networks Junos OS Evolved for PTX10001/PTX10004/PTX10008/PTX10016. The root cause is bypass of MAC address checking, allowing a network-adjacent attacker to forward MAC addresses not intended for the a...

6.1CVSS5.7AI score0.00166EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/10/11 9:04 p.m.•64 views

CVE-2023-44190 Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004, PTX10008, and PTX10016 devices allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded ...

6.1CVSS6.5AI score0.00166EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/11 9:00 p.m.•29 views

CVE-2023-44189 Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability

An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series allows a network-adjacent attacker to bypass MAC address checking, allowing MAC addresses not intended to reach the adjacent LAN to be forwarded to the downstream network. Due to...

6.1CVSS6.4AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/11 9:00 p.m.•77 views

CVE-2023-44189

CVE-2023-44189 affects Juniper Networks Junos OS Evolved on PTX10003 Series. The issue is an Origin Validation vulnerability in MAC address validation that lets a network-adjacent attacker bypass MAC checks, causing MACs not intended for the adjacent LAN to be forwarded to the downstream network,...

6.1CVSS5.7AI score0.0018EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/11 12:00 a.m.•16 views

PT-2023-6301 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 21.4R3-S5-EVO Juniper Networks Junos OS Evolved 22.1 versions prior to 22.1R3-S4-EVO Juniper Networks Junos OS Evolved 22.2 versions 22.2R1-EVO and later Juniper Networks Junos OS Evolved 22...

6.1CVSS5.4AI score0.00166EPSS
SaveExploits0References5
OSV
OSV
•added 2023/10/03 1:15 p.m.•15 views

CVE-2023-32791

Cross-Site Request Forgery CSRF vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. The vulnerability is based on the lack of proper validation of t...

6.5CVSS5.8AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/03 1:15 p.m.•17 views

CVE-2023-32792

Cross-Site Request Forgery CSRF vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to eliminate roles within the platform by sending a specifically crafted query to the server. The vulnerability is based on the absence of proper validation of the origin of...

6.5CVSS5.8AI score0.00232EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/20 4:15 p.m.•24 views

Cross site request forgery (csrf)

The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...

4.3CVSS6.4AI score0.00265EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/20 3:05 p.m.•30 views

CVE-2023-2508 CSRF in PaperCutNG Mobility Print leads to sophisticated phishing

The PaperCutNG Mobility Print version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host in the "configure printer discovery" section. This is possible because the application has no protections against CSRF...

5.3CVSS6.9AI score0.00265EPSS
SaveExploits1References2
ICS
ICS
•added 2023/08/22 6:00 a.m.•88 views

Hitachi Energy AFF66x

1. EXECUTIVE SUMMARY ​CVSS v3 9.6 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Hitachi Energy ​Equipment: AFF66x ​Vulnerabilities: Cross-site Scripting, Use of Insufficiently Random Values, Origin Validation Error, Integer Overflow or Wraparound, Uncontrolled Resource...

9.6CVSS8.8AI score0.98745EPSS
SaveExploits7References8
OSV
OSV
•added 2023/07/26 6:15 p.m.•12 views

CVE-2023-30949

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks...

5.3CVSS5.8AI score0.00201EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/26 6:15 p.m.•41 views

Input validation

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks...

5CVSS5.2AI score0.00201EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/26 5:35 p.m.•16 views

CVE-2023-30949 CVE-2023-30949

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks...

4.3CVSS6.8AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/26 5:35 p.m.•36 views

CVE-2023-30949 CVE-2023-30949

A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks...

4.3CVSS5.5AI score0.00201EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•13 views

PT-2023-21763 · Nodebb · Nodebb

Name of the Vulnerable Software and Affected Versions: NodeBB versions prior to 2.8.13 NodeBB versions prior to 3.1.3 Description: The issue is related to a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. This allows certain user information to be...

4.7CVSS4.4AI score0.00333EPSS
SaveExploits0References11
NVD
NVD
•added 2023/07/17 4:15 p.m.•24 views

CVE-2023-3581

Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs...

8.1CVSS0.00262EPSS
SaveExploits0References1
Rows per page
Query Builder