Lucene search
K

14 matches found

Cvelist
Cvelist
added 2026/04/09 9:28 p.m.16 views

CVE-2026-33773 Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

An Incorrect Initialization of Resource vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on specific EX Series and QFX Series device allows an unauthenticated, network-based attacker to cause an integrity impact to downstream networks. When the same family inet or...

6.9CVSS0.00201EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/07 12:0 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000449)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000449 advisory. A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is...

7.5CVSS6.6AI score0.01229EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-27114

Malware in sbrugna...

6.8CVSS5.7AI score0.00941EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2000-1158

Malware in sbrugna...

5CVSS6.4AI score0.01565EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-25327

Malicious code in bioql PyPI...

1CVSS6.5AI score0.0018EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-34666

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00457EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-54799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library an...

6CVSS5.5AI score0.00199EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.4 views

PT-2024-3325

Name of the Vulnerable Software and Affected Versions DHCP affected versions not specified Description The issue is related to a lack of authentication in the DHCP protocol, specifically with the classless static route option 121. This allows an attacker to manipulate routes and potentially...

7.6CVSS7.2AI score0.04063EPSS
Exploits1References124
ATTACKERKB
ATTACKERKB
added 2022/07/14 3:15 p.m.4 views

CVE-2022-32210

Undici.ProxyAgent never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via...

6.5CVSS5.4AI score0.00369EPSS
Exploits1References3
OSV
OSV
added 2022/07/14 3:15 p.m.2 views

DEBIAN-CVE-2022-32210

Undici.ProxyAgent never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via...

6.5CVSS6.4AI score0.00369EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2022/03/22 12:0 a.m.6 views

PT-2022-12418 · Unknown · Globalprotect-Openconnect

Name of the Vulnerable Software and Affected Versions: GlobalProtect-openconnect versions prior to 2.0.0 Description: The issue is related to incorrect access control in GPService through DBUS and GUI. This allows arbitrary users to start a VPN connection to arbitrary servers. An attacker can hos...

7.5CVSS7.4AI score0.00795EPSS
Exploits1References5
OSV
OSV
added 2018/05/01 6:29 p.m.3 views

CVE-2017-5535

The GridServer Broker, GridServer Driver, and GridServer Engine components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities related to both the improper use of encryption mechanisms and the use of weak ciphers. A malicious actor could theoretically compromise th...

6.8CVSS5.7AI score0.00185EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2017/08/01 2:24 p.m.1 views

python: failure to validate certificates in the HTTP client with TLS (PEP 476)

The Python standard library HTTP client modules such as httplib or urllib did not perform verification of TLS/SSL certificates when connecting to HTTPS servers. A man-in-the-middle attacker could use this flaw to hijack connections and eavesdrop or modify transferred data...

5.8CVSS7.2AI score0.03269EPSS
Exploits1References4
ThreatPost
ThreatPost
added 2014/12/18 12:23 p.m.8 views

Misfortune Cookie Home Router Vulnerability Discovered

More than 12 million devices running an embedded webserver called RomPager are vulnerable to a simple attack that could give a hacker man-in-the-middle position on traffic going to and from home routers from just about every leading manufacturer. Mostly ISP-owned residential gateways manufactured...

7.4AI score
Exploits0References4
Rows per page
Query Builder