Lucene search
+L

255 matches found

Vulnrichment
Vulnrichment
added 2024/11/01 12:00 a.m.15 views

CVE-2024-51407

Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host communication anomalies...

6.7AI score0.00244EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.12 views

PT-2024-34620 · Unknown · Open Floodlight Sdn Controller

Name of the Vulnerable Software and Affected Versions: Floodlight SDN Open Flow Controller version 1.2 Description: The issue allows local hosts to build fake LLDP packets, which can cause Floodlight to miss specific clusters. This, in turn, leads to missed hosts inside and outside the cluster. T...

6.2CVSS6.3AI score0.00232EPSS
SaveExploits1References9
OSV
OSV
added 2024/11/01 12:00 a.m.12 views

CVE-2024-51407

Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host communication anomalies...

6.2CVSS6.9AI score
SaveExploits0References5
CVE
CVE
added 2024/11/01 12:00 a.m.60 views

CVE-2024-51407

CVE-2024-51407 affects Floodlight SDN OpenFlow Controller, version 1.2. The issue allows local hosts to construct false broadcast ports, causing inter-host communication anomalies. Documented CVSS v3.1 base score is 6.2 (Medium) with local attack vector, no user interaction, and high impact on av...

6.2CVSS6.4AI score0.00244EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/11/01 12:00 a.m.9 views

CVE-2024-51406

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster...

6.2CVSS6.9AI score
SaveExploits0References5
CVE
CVE
added 2024/11/01 12:00 a.m.54 views

CVE-2024-51406

CVE-2024-51406 affects Floodlight SDN OpenFlow Controller v1.2. The issue enables local hosts to craft fake LLDP packets, causing specific clusters to be missed by Floodlight and resulting in missed hosts both inside and outside the cluster. The vulnerability’s assessment in the provided sources ...

6.2CVSS6.4AI score0.00232EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/11/01 12:00 a.m.34 views

CVE-2024-51406

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster...

0.00232EPSS
SaveExploits1References3
Microsoft KB
Microsoft KB
added 2024/10/08 2:00 p.m.320 views

October 8, 2024—KB5044281 (OS Build 20348.2762)

None None...

9CVSS6.8AI score0.66926EPSS
SaveExploits4
NVD
NVD
added 2024/07/09 4:15 p.m.23 views

CVE-2023-50179

An improper certificate validation vulnerability CWE-295 in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors...

5.9CVSS0.00152EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/09 4:15 p.m.8 views

CVE-2023-50178

An improper certificate validation vulnerability CWE-295 in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication...

7.4CVSS5.8AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/09 3:33 p.m.12 views

CVE-2023-50178

An improper certificate validation vulnerability CWE-295 in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication...

7.4CVSS7.3AI score0.002EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/09 3:33 p.m.64 views

CVE-2023-50178

FortiADC is affected by an improper certificate validation vulnerability (CWE-295) that may allow remote, unauthenticated attackers to perform a Man-in-the-Middle on the channel between FortiADC devices and remote servers (e.g., private SDN connectors, FortiToken Cloud). Connected sources consist...

7.4CVSS7.3AI score0.002EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/07/09 3:33 p.m.35 views

CVE-2023-50178

An improper certificate validation vulnerability CWE-295 in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication...

7.4CVSS0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/09 3:33 p.m.17 views

CVE-2023-50179

An improper certificate validation vulnerability CWE-295 in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors...

4.8CVSS7.2AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/09 3:33 p.m.32 views

CVE-2023-50179

An improper certificate validation vulnerability CWE-295 in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors...

4.8CVSS0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/07/09 12:00 a.m.9 views

PT-2024-13879 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 6.0 through 7.4.0 Description: The issue is related to an improper certificate validation, which may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the...

7.4CVSS7.1AI score0.002EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/07/09 12:00 a.m.7 views

PT-2024-13880 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 7.0 through 7.4.0 Description: An improper certificate validation issue may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN...

5.9CVSS7.2AI score0.00152EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2024/05/07 2:39 a.m.8 views

SUSE CVE-2024-34486

OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPQueueProp.len=0...

7.5CVSS6.8AI score0.00646EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2024/05/07 2:39 a.m.13 views

SUSE CVE-2024-34488

OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via b.length=0...

7.5CVSS6.8AI score0.00681EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2024/05/07 2:39 a.m.8 views

SUSE CVE-2024-34489

OFPHello in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via length=0...

7.5CVSS6.8AI score0.00681EPSS
SaveExploits1References3
Rows per page
Query Builder