Lucene search
+L

247 matches found

CNVD
CNVD
added 2021/12/17 12:0 a.m.31 views

FatPipe WARP, IPVPN and MPVPN have unspecified vulnerabilities (CNVD-2021-101931)

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover as a result of a WAN component or service failure resulting in a data line connection outage.FatPipe WARP, IPVPN and MPVPN have a security vulnerability that could be exploited by a...

8.8CVSS3.6AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/17 12:0 a.m.51 views

FatPipe WARP, IPVPN, and MPVPN Authorization Vulnerability (CNVD-2021-101933)

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover due to a WAN component or service failure that results in a data line connection outage.A security vulnerability exists in FatPipe WARP, IPVPN and MPVPN that stems from a lack of...

7.5CVSS1.9AI score0.01794EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/17 12:0 a.m.48 views

FatPipe WARP, IPVPN and MPVPN have unspecified vulnerabilities

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover due to the failure of a WAN component or service resulting in the loss of data line connectivity.A security vulnerability exists in FatPipe WARP, IPVPN and MPVPN, which stems from t...

9.8CVSS2.6AI score0.05598EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/17 12:0 a.m.47 views

FatPipe WARP, IPVPN, and MPVPN Authorization Vulnerability (CNVD-2021-101934)

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover as a result of a WAN component or service failure resulting in a data line connection outage.A security vulnerability exists in FatPipe WARP, IPVPN and MPVPN, which stems from a lac...

5.3CVSS2.6AI score0.02703EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/15 12:0 a.m.6 views

FatPipe 安全漏洞

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover due to a WAN component or service failure that results in a data line connection outage.A security vulnerability exists in FatPipe WARP, IPVPN and MPVPN that stems from a lack of...

7.5CVSS5.6AI score0.01794EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/12/15 12:0 a.m.6 views

FatPipe 安全漏洞

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover as a result of a WAN component or service failure resulting in a data line connection outage.FatPipe WARP, IPVPN and MPVPN have a security vulnerability that could be exploited by a...

8.8CVSS5.6AI score0.01604EPSS
SaveExploits1References4
Zero Science Lab
Zero Science Lab
added 2021/09/27 12:0 a.m.254 views

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Hidden Backdoor Account (Write Access)

Summary FatPipe Networks invented the concept of router-clustering, which provides the highest level of reliability, redundancy, and speed of Internet traffic for Business Continuity and communications. FatPipe WARP achieves fault tolerance for companies by creating an easy method of combining tw...

9.8CVSS7.2AI score0.05598EPSS
SaveExploits1
OSV
OSV
added 2021/07/30 2:15 p.m.6 views

CVE-2021-28095

OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32...

4.8CVSS5.8AI score0.00903EPSS
SaveExploits0References3
Prion
Prion
added 2021/02/11 9:15 p.m.26 views

Design/Logic Flaw

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

6.1CVSS6.4AI score0.00566EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/11 8:32 p.m.34 views

CVE-2020-9307

Hirschmann OS2, RSP, and RSPE devices before HiOS 08.3.00 allow a denial of service. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on ...

6.5AI score0.00566EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/20 4:15 p.m.3 views

ALPINE-CVE-2020-25685

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash CRC32 when dnsmasq is compiled without DNSSE...

3.7CVSS6.3AI score0.02181EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2021/01/20 12:0 a.m.7 views

dnsmasq 加密问题漏洞

Dnsmasq is a lightweight DNS forwarding and DHCP, TFTP server written in C. It can be used as a server to forward DNS, DHCP, and TFTP. Dnsmasq suffers from a security vulnerability that stems from the use of a weak hash algorithm CRC32 to validate DNS responses when compiled without dnnssec. No...

4.3CVSS6.9AI score0.04873EPSS
SaveExploits2References24
Kitploit
Kitploit
added 2020/11/21 11:30 a.m.169 views

Routopsy - A Toolkit Built To Attack Often Overlooked Networking Protocols

Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed to...

7AI score
SaveExploits0References2
Akamai Blog
Akamai Blog
added 2020/11/11 2:0 p.m.40 views

Redundant, Secure, and Open Short Domains: A Vision for Multi-Provider Apex Domain Aliases to Enable DNS Diversity

One Small Step for DNS, One Giant Leap for the Internet Human nature is to seek simpler and convenient ways to do things. One example is the sometimes onerous task of typing a URL into a web browser's address bar. Since users prefer short, easy-to-remember URLs, an internet trend is to use short...

0.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/08/25 12:0 p.m.23 views

Shoring Up the 2020 Election: Secure Vote Tallies Aren't the Problem

With the 2020 U.S. Presidential Election coming up in just two months, cybersecurity concerns are taking center stage for average citizens and politicians. That said, the likelihood of election results being impacted by an attack are slim, security researchers say. The focus should be on other...

0.5AI score
SaveExploits0References21
Schneier on Security
Schneier on Security
added 2020/07/02 2:26 p.m.17 views

The Security Value of Inefficiency

For decades, we have prized efficiency in our economy. We strive for it. We reward it. In normal times, that's a good thing. Running just at the margins is efficient. A single just-in-time global supply chain is efficient. Consolidation is efficient. And that's all profitable. Inefficiency, on th...

SaveExploits0
NVD
NVD
added 2020/04/29 2:15 a.m.24 views

CVE-2020-8486

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

7.8CVSS6.7AI score0.0033EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/29 2:15 a.m.21 views

CVE-2020-8487

Insufficient protection of the inter-process communication functions in ABB System 800xA Base all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

7.8CVSS6.7AI score0.0033EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/29 2:15 a.m.21 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA Base all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

4.6CVSS7.3AI score0.0033EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/29 2:15 a.m.18 views

Design/Logic Flaw

Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP all published versions enables an attacker authenticated on the local system to inject data, affect node redundancy handling...

4.6CVSS7.3AI score0.0033EPSS
SaveExploits0References1
Rows per page
Query Builder