Lucene search
+L

2501 matches found

Prion
Prion
added 2023/11/22 5:15 p.m.20 views

Design/Logic Flaw

Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component. If a customer has a certificate signed by a third-party public Certificate Authority, the vCenter CA could be spoofed by an attacker who can obtain a CA-signed certificate...

2.6CVSS7AI score0.00295EPSS
SaveExploits0References1Affected Software3
Tenable Nessus
Tenable Nessus
added 2023/11/15 12:00 a.m.41 views

Rockwell Automation Stratix Denial of Service by Spoofed Kiss-o'-Death (CVE-2015-7704)

Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...

7.5CVSS7AI score0.1095EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/10 12:00 a.m.7 views

Volkswagen ID.3 Security Vulnerability

The Volkswagen ID.3 is an all-electric vehicle from Volkswagen Germany. A security vulnerability exists in the Volkswagen ID.3 ICAS 3 IVI ECU that originates from a vulnerability that allows an attacker to cause a denial of service DOS and invoke the spoof volume setting command via the REST API ...

6.3CVSS6.8AI score0.00393EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/03 5:15 a.m.6 views

DEBIAN-CVE-2023-41259

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...

7.5CVSS7.3AI score0.00717EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/03 5:15 a.m.4 views

UBUNTU-CVE-2023-41259

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...

7.5CVSS7.1AI score0.00717EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2023/11/03 12:00 a.m.69 views

CVE-2023-41259

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...

7.5CVSS7.3AI score0.00717EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/11/03 12:00 a.m.8 views

WordPress Plugin video carousel slider with lightbox Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS6.8AI score0.00306EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/11/02 12:00 a.m.29 views

F5 Networks BIG-IP : NTP vulnerability (K44305703)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K44305703 advisory. The ntpd daemon in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated...

7.5CVSS6.6AI score0.02081EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/30 12:00 a.m.15 views

PT-2023-6733 · Best Practical +2 · Request Tracker +2

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 4.4.6 and earlier Best Practical Request Tracker RT versions 5.0.4 and earlier Description: The issue allows Information Disclosure via fake or spoofed RT email headers in an email message or a...

7.5CVSS7.2AI score0.01835EPSS
SaveExploits0References54
OSV
OSV
added 2023/10/23 2:15 p.m.10 views

CVE-2023-28803

An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on Windows, allowing a functionality bypass. This issue affects Client Connector: before 3.9...

6.5CVSS5.8AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/06 6:15 p.m.23 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS6.8AI score0.00389EPSS
SaveExploits0References6
OSV
OSV
added 2023/10/06 6:15 p.m.7 views

DEBIAN-CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

5.5CVSS6.4AI score0.00389EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/06 6:15 p.m.23 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

5.5CVSS6.7AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2023/10/06 6:15 p.m.7 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS5.9AI score0.00389EPSS
SaveExploits0References7
Prion
Prion
added 2023/10/06 6:15 p.m.27 views

Design/Logic Flaw

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

1.7CVSS5.6AI score0.00389EPSS
SaveExploits0References4Affected Software4
UbuntuCve
UbuntuCve
added 2023/10/06 6:15 p.m.33 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS6.6AI score0.00389EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2023/10/06 5:43 p.m.34 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS6.2AI score0.00389EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/10/06 5:43 p.m.56 views

CVE-2023-5366 Openvswitch don't match packets on nd_target field

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS7AI score0.00389EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
added 2023/10/06 5:43 p.m.120 views

CVE-2023-5366

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to...

7.1CVSS6.4AI score0.00389EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/10/06 12:00 a.m.6 views

PT-2023-9041 · Unknown +6 · Openvswitch +6

Name of the Vulnerable Software and Affected Versions: Open vSwitch affected versions not specified Description: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create...

7.5CVSS7.7AI score0.01033EPSS
SaveExploits0References89
Rows per page
Query Builder