Lucene search
K

7 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux - уязвимость в systemd

There is an exploitable denial-of-service vulnerability in Systemd 245. A specially crafted DHCP FORCERENEW packet can expose a server running the DHCP client to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server...

6.1CVSS6.7AI score0.00085EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/04/08 12:0 a.m.5 views

CVE-2023-30450

rpk in Redpanda before 23.1.2 mishandles the redpanda.rpcservertls field, leading to for example situations in which there is a data type mismatch that cannot be automatically fixed by rpk, and instead a user must reconfigure while a cluster is turned off in order to have TLS on broker RPC ports...

4.6AI score0.00285EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:58 a.m.1 views

SUSE CVE-2020-13529

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server...

6.1CVSS8.5AI score0.00085EPSS
Exploits1References25
CNVD
CNVD
added 2020/05/18 12:0 a.m.2 views

Cherokee Cross-Site Scripting Vulnerability

Cherokee is an open source web server. A cross-site scripting vulnerability exists in the handlerserverinfo.c file in Cherokee 1.2.104 and earlier versions, which stems from a requested URL not being displayed correctly on the About page. An attacker can use this vulnerability to reconfigure the...

8.4CVSS6.6AI score0.00857EPSS
Exploits1References1
Prion
Prion
added 2018/08/30 5:29 p.m.14 views

Design/Logic Flaw

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The cloud API had a hidden parameter, which allowed an authenticated...

6.5CVSS8.5AI score0.00548EPSS
Exploits0References1Affected Software6
Packet Storm
Packet Storm
added 2014/09/30 12:0 a.m.50 views

Moab Insecure Message Signing Authentication Bypass

Moab Authentication Bypass insecure message signing : CVE-2014-5376 Software: Moab Affected Versions: Dependent on configuration, can affect all versions of Moab including Moab 8 CVE Reference: CVE-2014-5376 Author: John Fitzpatrick, Luke Jennings MWR Labs http://labs.mwrinfosecurity.com/ Severit...

4CVSS0.7AI score0.00306EPSS
Exploits3
Packet Storm
Packet Storm
added 2010/05/15 12:0 a.m.14 views

Project Forum 6.5.2.2978 Cross Site Request Forgery / Cross Site Scripting

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

0.2AI score
Exploits0
Rows per page
Query Builder