7365 matches found
CVE-2024-26305
There is a buffer overflow vulnerability in the underlying Utility daemon that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of this vulnerability result...
CVE-2024-26304
CVE-2024-26304 describes an unauthenticated buffer overflow in ArubaOS where the L2/L3 Management service can be triggered by specially crafted packets on the PAPI UDP port 8211 to achieve remote code execution as a privileged OS user. Affected products include Aruba Mobility Conductor (Mobility ...
CVE-2024-26304
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of this...
CVE-2024-26304
There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of this...
Security Bulletin: IBM Maximo Application Suite - IOT Component uses dnspython-1.16.0-py2.py3-none-any.whl which is vulnerable to CVE-2023-29483
Summary IBM Maximo Application Suite - IOT Component uses dnspython-1.16.0-py2.py3-none-any.whl which is vulnerable to CVE-2023-29483. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2023-29483 DESCRIPTION: Dnspython is vulnerable to...
Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass (cisco-sa-snmp-uhv6ZDeF)
According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network...
CVE-2024-25458
An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera circuit board identifier A9-48B-V1.0 firmware v.CYCAM48BBC01v870903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port...
CVE-2024-25458
An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera circuit board identifier A9-48B-V1.0 firmware v.CYCAM48BBC01v870903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port...
CVE-2024-25458
CVE-2024-25458 affects SHIXCAM A9 Camera firmware v.CYCAM_48B_BC01_v87_0903. A vulnerable UDP-port handling path allows a remote attacker to obtain sensitive information. Reported in multiple feeds (NVD/Red Hat/CVE records) with a CVSSv3.1 base score of 7.5 (HIGH) and network/vector: remote, no u...
RHEL 7 : Red Hat OpenStack Platform 12.0 director (RHSA-2018:2331)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2331 advisory. memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web...
RHEL 5 : java-1.4.2-ibm-sap (RHSA-2012:0343)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0343 advisory. - HTTPS: block-wise chosen-plaintext attack against SSL/TLS BEAST CVE-2011-3389 - Oracle/IBM JDK: unspecified vulnerability fixed in 6u29...
RHEL 7 : Red Hat OpenStack Platform 8 director (RHSA-2018:2857)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2857 advisory. memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web...
RHEL 7 : Red Hat OpenStack Platform director (RHSA-2018:1627)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1627 advisory. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service Iaa...
RHEL 7 : Red Hat OpenStack Platform director (RHSA-2018:1593)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1593 advisory. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service Iaa...
Espionage - A Linux Packet Sniffing Suite For Automated MiTM Attacks
Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so,...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
The vulnerability of the QUIC protocol implementation in the Go programming language library quic-go, related to the unlimited distribution of resources, allows a attacker to cause service failures.
The vulnerability of the QUIC protocol implementation in the quic-go library written in the Go programming language is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Juniper Junos OS Vulnerability (JSA75743)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75743 advisory. - A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to...
CVE-2024-26853
In the Linux kernel, the following vulnerability has been resolved: igc: avoid returning frame twice in XDPREDIRECT When a frame can not be transmitted in XDPREDIRECT e.g. due to a full queue, it is necessary to free it by calling xdpreturnframerxnapi. However, this is the responsibility of the...
