Lucene search
+L

2800 matches found

ATTACKERKB
ATTACKERKB
added 2017/10/04 1:29 a.m.8 views

CVE-2017-12819

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...

9.8CVSS5.5AI score0.01356EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2017/10/03 1:00 p.m.68 views

CVE-2017-12819

CVE-2017-12819 refers to remote manipulation of the Gemalto SafeNet Sentinel language-pack updater, enabling NTLM-relay attacks for the system user in HASP SRM, Sentinel HASP and Sentinel LDK before Sentinel LDK RTE 7.55. Connected advisories corroborate remote NTLM-relay risk and advise upgradin...

9.8CVSS9.4AI score0.01356EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/10/03 1:00 p.m.28 views

CVE-2017-12819

Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55...

9.5AI score0.01356EPSS
SaveExploits0References3
OSV
OSV
added 2017/10/03 1:29 a.m.6 views

ALPINE-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

5.9CVSS6.6AI score0.67549EPSS
SaveExploits5References1
OSV
OSV
added 2017/10/03 1:29 a.m.5 views

DEBIAN-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

5.9CVSS7.4AI score0.67549EPSS
SaveExploits5References1
NVD
NVD
added 2017/10/03 1:29 a.m.16 views

CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

5.9CVSS6.5AI score0.67549EPSS
SaveExploits5References20
Debian CVE
Debian CVE
added 2017/10/02 9:00 p.m.32 views

CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

5.9CVSS7.8AI score0.67549EPSS
SaveExploits5
RedHat Linux
RedHat Linux
added 2017/10/02 5:18 p.m.8 views

dnsmasq: information leak in the DHCPv6 relay code

An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data...

5.9CVSS7.1AI score0.67549EPSS
SaveExploits5References6
UbuntuCve
UbuntuCve
added 2017/10/02 12:00 a.m.29 views

CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

5.9CVSS7AI score0.67549EPSS
SaveExploits5References4
Amazon
Amazon
added 2017/10/02 12:00 a.m.90 views

Critical: dnsmasq

Issue Overview: Information leak in the DHCPv6 relay code An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data...

9.8CVSS9.1AI score0.93307EPSS
SaveExploits32
OSV
OSV
added 2017/10/02 12:00 a.m.18 views

UBUNTU-CVE-2017-14494

dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...

5.9CVSS6.9AI score0.67549EPSS
SaveExploits5References5
NVD
NVD
added 2017/09/29 1:34 a.m.25 views

CVE-2017-12240

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload,...

10CVSS10AI score0.13883EPSS
SaveExploits0References6
OSV
OSV
added 2017/09/29 1:34 a.m.7 views

CVE-2017-12240

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload,...

9.8CVSS6.4AI score0.13883EPSS
SaveExploits0References6
Prion
Prion
added 2017/09/29 1:34 a.m.30 views

Design/Logic Flaw

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload,...

10CVSS9.9AI score0.13883EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2017/09/29 12:00 a.m.45 views

CVE-2017-12240

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload,...

10CVSS4.5AI score0.13883EPSS
SaveIn wildExploits0References6
Cvelist
Cvelist
added 2017/09/28 7:00 a.m.38 views

CVE-2017-12240

The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload,...

10AI score0.13883EPSS
SaveExploits0References5
CVE
CVE
added 2017/09/28 7:00 a.m.1306 views

CVE-2017-12240

CVE-2017-12240 affects Cisco IOS 12.2–15.6 and Cisco IOS XE DHCP relay subsystems. The issue is a buffer overflow in the DHCPv4 handling that allows unauthenticated, remote attackers to execute arbitrary code and possibly reload the device, causing a DoS. Impact is full control of the affected sy...

10CVSS10AI score0.13883EPSS
SaveIn wildExploits0References6Affected Software1
CNVD
CNVD
added 2017/09/28 12:00 a.m.12 views

Cisco IOS and IOS XE Software Buffer Overflow Vulnerability

Cisco IOS and IOS XE are both operating systems developed by Cisco for its network devices. Cisco IOS Software/Cisco IOS XE Software has a security vulnerability in the DHCP relay subsystem that allows an unauthenticated, remote attacker to execute arbitrary code and take full control of the...

10CVSS7.9AI score0.13883EPSS
SaveExploits0References1
Prion
Prion
added 2017/09/13 5:29 p.m.19 views

Design/Logic Flaw

The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices, participates in mydlink Cloud Services by establishing a TCP relay service for HTTP, even though a TCP relay service for HTTPS is also...

4.3CVSS5.8AI score0.00834EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2017/09/13 5:00 p.m.64 views

CVE-2017-14419

CVE-2017-14419 affects the D-Link DIR-850L NPAPI extension used with REV A (FW114WWb07_h2ab_beta1) and REV B (FW208WWb02). The issue is that this NPAPI component participates in mydlink Cloud Services by establishing a TCP relay service for HTTP, in addition to an existing TCP relay for HTTPS. CN...

5.9CVSS6.6AI score0.00834EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder