15243 matches found
FUJITSU Network IPCOM EX2 Security Vulnerability
The Fujitsu FUJITSU Network IPCOM EX2 is a series of networking devices from Fujitsu Japan. A security vulnerability exists in FUJITSU Network IPCOM EX2 V01L0x V01L07NF0201 and earlier versions, IPCOM VE2 V01L07NF0201 and earlier versions, which originates from the possibility that the IPCOM...
PT-2024-27181 · Unknown · Rmqtt Broker
Name of the Vulnerable Software and Affected Versions: RMQTT Broker version 0.4.0 Description: The issue allows remote attackers to cause a Denial of Service, resulting in a daemon crash, via a specific sequence of five TCP packets. Recommendations: For RMQTT Broker version 0.4.0, at the moment,...
CVE-2024-36856
RMQTT Broker 0.4.0 is vulnerable to Denial of Service DoS due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions...
CVE-2024-26010
A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0...
Multiple Fortinet products Security vulnerabilities
Fortinet FortiAuthenticator and others are products of Fortinet, Inc.Fortinet FortiAuthenticator is a centralized user identity management solution.Fortinet FortiSwitchManager is a network switch Fortinet FortiSwitchManager is a network switch management tool designed to help organizations manage...
PT-2024-4139
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The vulnerability allows remote attackers to execute arbitrary code and affect the system. It is related to errors in processing input data in the Windows Wi-Fi driver. An unauthenticated...
PT-2024-4790 · Tp Link · Tp-Link Tl-7Dr5130
Name of the Vulnerable Software and Affected Versions: TP-LINK TL-7DR5130 version 1.0.23 Description: The issue is related to insufficient validation of the communication channel source, which can be exploited by an attacker to perform a TCP Reset attack. This can be done by sending specially...
K000139922: Open vSwitch vulnerabilities CVE-2023-3966 and CVE-2023-5366
Security Advisory Description CVE-2023-3966 A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is...
kernel: net/sched: act_ct: fix skb leak and crash on ooo frags
A memory leak flaw and potential kernel crash were found in the Linux kernel’s Conntrack module. This issue occurs when Conntrack is being used by a local user for a specific configuration, and both fragmented packets are received remotely and out of order. This flaw allows a local or remote user...
BIT-NODE-2024-27983
An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a T...
The vulnerability of the libndp library, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the libndp library relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending specially crafted IPv6 packets...
CVE-2024-36962
In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs Currently the driver uses localbhdisable/localbhenable in its IRQ handler to avoid triggering netrxaction softirq on exit from netifrx. The netrxaction could...
UBUNTU-CVE-2024-36962
In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs Currently the driver uses localbhdisable/localbhenable in its IRQ handler to avoid triggering netrxaction softirq on exit from netifrx. The netrxaction could...
CVE-2024-36962 net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs
In the Linux kernel, the following vulnerability has been resolved: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs Currently the driver uses localbhdisable/localbhenable in its IRQ handler to avoid triggering netrxaction softirq on exit from netifrx. The netrxaction could...
RHEL 6 : qemu-kvm (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - QEMU: net: ignore packets with large size CVE-2018-17963 - Buffer overflow in the sendcontrolmsg function...
RHEL 8 : lldpd (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - lldp/openvswitch: denial of service via externally triggered memory leak CVE-2020-27827 - lldpd:...
RHEL 7 : libssh2 (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libssh2: Out-of-bounds reads with specially crafted SFTP packets CVE-2019-3860 - In libssh2 before 1.9.0,...
RHEL 8 : openssh (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openssh: User enumeration via malformed packets in authentication requests CVE-2018-15919 - openssh:...
RHEL 8 : 8.2_libtpms (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libtpms: out-of-bounds access via specially crafted TPM 2 command packets CVE-2021-3746 - A stack...