Lucene search
+L

2804 matches found

NVD
NVD
added 2021/04/22 8:15 p.m.29 views

CVE-2021-0267

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

7.4CVSS0.00466EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/22 8:15 p.m.13 views

CVE-2021-0267

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

6.5CVSS6.6AI score0.00466EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/22 8:15 p.m.24 views

Input validation

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

3.3CVSS6.4AI score0.00466EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/22 7:37 p.m.65 views

CVE-2021-0267

Summary: CVE-2021-0267 is an input validation flaw in JDHCPD’s DHCP Relay Agent (active-lease query) in Juniper Junos OS. An attacker can trigger a crash of the jdhcpd DHCP service by sending a crafted DHCP packet, causing a Denial of Service. Affected Junos OS versions include 19.4 before 19.4R3...

7.4CVSS6.6AI score0.00466EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/14 4:00 p.m.6 views

CVE-2021-0267

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

7.4CVSS6.5AI score0.00466EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2021/04/07 4:33 a.m.21 views

Denial Of Service (DoS)

github.com/syncthing/syncthing is vulnerable to denial of service. An attacker is able to crash the application by sending a malicious relay protocol message containing a negative length field...

7.5CVSS4.2AI score0.0197EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2021/04/06 8:15 p.m.1 views

DEBIAN-CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/06 8:15 p.m.11 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS0.0197EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/06 8:15 p.m.8 views

UBUNTU-CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0References6
Prion
Prion
added 2021/04/06 8:15 p.m.17 views

Design/Logic Flaw

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

5CVSS7AI score0.0197EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/04/06 8:15 p.m.27 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7AI score0.0197EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/04/06 8:00 p.m.50 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/04/06 8:00 p.m.23 views

CVE-2021-21404 Crash due to malformed relay protocol message

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.3AI score0.0197EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2021/04/06 8:00 p.m.58 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7.1AI score0.0197EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.7 views

Jakob Borg syncthing 输入验证错误漏洞

Jakob Borg syncthing is a Jakob Borg open source application. A continuous file synchronization program. A security vulnerability exists in Syncthing before version 1.15.0, which stems from the possibility of crashing and exiting by sending a relay message with a negative length field...

7.5CVSS7.2AI score0.0197EPSS
SaveExploits0References6
FreeBSD
FreeBSD
added 2021/04/06 12:00 a.m.24 views

syncthing -- crash due to malformed relay protocol message

syncthing developers report: syncthing can be caused to crash and exit if sent a malformed relay protocol message message with a negative length field. The relay server strelaysrv can be caused to crash and exit if sent a malformed relay protocol message with a negative length field...

7.5CVSS3AI score0.0197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/04/06 12:00 a.m.7 views

PT-2021-14481 · Syncthing +2 · Syncthing +2

Name of the Vulnerable Software and Affected Versions: Syncthing versions prior to 1.15.0 Description: The issue allows a malicious relay server to cause Syncthing to crash by sending a malformed relay protocol message with a negative length field. Similarly, the relay server strelaysrv can be...

7.5CVSS7.6AI score0.0197EPSS
SaveExploits1References33
OSV
OSV
added 2021/04/02 3:15 p.m.10 views

CVE-2021-28113

A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers with admin access to the Okta Access Gateway UI to execute OS commands as a privileged system account...

6.7CVSS6.7AI score0.22326EPSS
SaveExploits3References2
ATTACKERKB
ATTACKERKB
added 2021/04/02 3:15 p.m.7 views

CVE-2021-28113

A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers with admin access to the Okta Access Gateway UI to execute OS commands as a privileged system account...

8.7CVSS6.7AI score0.22326EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2021/03/26 8:30 p.m.59 views

cve_manager_VS - A Collection Of Python Apps And Shell Scripts To Email An Xlsx Spreadsheet Of New Vulnerabilities In The NIST CVE Database And Their Associated Products On A Daily Schedule

A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their associated products on a daily schedule. The spreadsheet can then be manually interpreted for risk to your specific organization. Based off of an opensource product...

7.7AI score
SaveExploits0References3
Rows per page
Query Builder