Lucene search
+L

429 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in @zalastax/nolb-pim (npm)

The package @zalastax/nolb-pim was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-13158 Malicious code in @zalastax/nolb-pim (npm)

The package @zalastax/nolb-pim was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/07/11 4:15 p.m.11 views

CVE-2025-52981

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX1600, SRX2300, SRX 4000 Series, and SRX5000 Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If a sequen...

8.7CVSS5.8AI score0.00441EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/11 3:08 p.m.44 views

CVE-2025-52981

CVE-2025-52981 affects Juniper JUNOS OS flowd on SRX1600/SRX2300/SRX4000/SRX5000 (with SPC3). A sequence of specific PIM multicast packets can cause an unauthenticated network-based attacker to crash flowd and restart, resulting in DoS. Vulnerable versions include all before 21.2R3-S9, 21.4 befor...

8.7CVSS6.4AI score0.00441EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/11 3:08 p.m.18 views

CVE-2025-52981 Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX1600, SRX2300, SRX 4000 Series, and SRX5000 Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If a sequen...

8.7CVSS6.3AI score0.00441EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:27 p.m.25 views

CVE-2020-1865

There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the...

6.5CVSS6.9AI score0.00332EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2017-13030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. CVE-2017-13030 Note that Nessus relies on the presence of the...

9.8CVSS7AI score0.03428EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 9:01 p.m.16 views

CVE-2022-46157

Akeneo PIM is an open source Product Information Management PIM. Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Community Edition after the versions...

8.8CVSS7.3AI score0.01406EPSS
SaveExploits1References1
CVE
CVE
added 2024/11/13 3:20 p.m.82 views

CVE-2024-52305

CVE-2024-52305 affects UnoPim (Laravel). The issue resides in the Create User flow, where uploading a profile image (notably SVG) can execute embedded scripts, enabling a stored XSS that can steal cookies and potentially hijack sessions. Affected versions include the UnoPim releases prior to the ...

6.5CVSS5.5AI score0.00185EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2024/11/06 5:15 p.m.39 views

CVE-2024-20484

A vulnerability in the External Agent Assignment Service EAAS feature of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of Media Routing...

7.5CVSS0.00635EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/06 4:29 p.m.16 views

CVE-2024-20484 Cisco Enterprise Chat and Email Denial of Service Vulnerability

A vulnerability in the External Agent Assignment Service EAAS feature of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of Media Routing...

7.5CVSS7AI score0.00635EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/06 4:29 p.m.42 views

CVE-2024-20484 Cisco Enterprise Chat and Email Denial of Service Vulnerability

A vulnerability in the External Agent Assignment Service EAAS feature of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of Media Routing...

7.5CVSS0.00635EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/11/06 4:00 p.m.77 views

Cisco Enterprise Chat and Email Denial of Service Vulnerability

A vulnerability in the External Agent Assignment Service EAAS feature of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of Media Routing...

7.5CVSS7.6AI score0.00635EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/11 4:15 p.m.25 views

CVE-2024-47503

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an unauthenticated and logically adjacent attacker to cause a Denial-of-Service DoS. If in a multicast scenario a sequence of...

7.1CVSS0.00334EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/11 4:15 p.m.14 views

CVE-2024-47503

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an unauthenticated and logically adjacent attacker to cause a Denial-of-Service DoS. If in a multicast scenario a sequence of...

7.1CVSS5.7AI score0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/11 3:32 p.m.28 views

CVE-2024-47503 Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an unauthenticated and logically adjacent attacker to cause a Denial-of-Service DoS. If in a multicast scenario a sequence of...

7.1CVSS0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/11 3:32 p.m.16 views

CVE-2024-47503 Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX4600 and SRX5000 Series allows an unauthenticated and logically adjacent attacker to cause a Denial-of-Service DoS. If in a multicast scenario a sequence of...

7.1CVSS7AI score0.00334EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/25 5:15 p.m.12 views

CVE-2024-20464

A vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of received IPv4 PIMv2 packets. An...

8.6CVSS5.8AI score0.00568EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/25 4:28 p.m.31 views

CVE-2024-20464

A vulnerability in the Protocol Independent Multicast PIM feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of received IPv4 PIMv2 packets. An...

8.6CVSS0.00568EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/25 4:28 p.m.75 views

CVE-2024-20464

Cisco IOS XE Software contains a DoS vulnerability in the Protocol Independent Multicast (PIM) feature. Insufficient validation of received IPv4 PIMv2 packets can allow an unauthenticated, remote attacker to force a device reload via crafted PIMv2 packets (attack can use either IPv4 multicast or ...

8.6CVSS7.1AI score0.00568EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder