3609 matches found
PYSEC-2020-215
Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for know...
CVE-2020-24719
Exposed Erlang Cookie could lead to Remote Command Execution RCE attack. Communication between Erlang nodes is done by exchanging a shared secret aka "magic cookie". There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlan...
CVE-2020-25268
Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data...
CVE-2020-5667
Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...
tcpdump: Buffer over-read in function rpl_dio_printopt in print-icmp6.c
An out-of-bounds read vulnerability was discovered in tcpdump while printing ICMP6 packets captured in a pcap file or coming from the network. A remote attacker may abuse this flaw by sending specially crafted packets that, when printed, would trigger the flaw and crash the application...
Pimcore SQL Injection Vulnerability (CNVD-2020-60991)
Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A SQL injection vulnerability exists in pimcore...
CVE-2020-9919
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead t...
CVE-2020-3373
A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. This memory leak could prevent traffic from...
PT-2020-7002 · Fortinet · Forticlient For Linux
Name of the Vulnerable Software and Affected Versions: FortiClient for Linux versions 6.2.7 and below, version 6.4.0 Description: The issue is related to insecure privilege management in the VCM engine of FortiClient for Linux. Exploitation of this issue may allow a remote attacker to elevate the...
CVE-2020-1672
On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdhcpd daemon automatically restarts without intervention, but continuous receipt of specific crafted DHCP messages will repeatedly crash jdhcpd, leadi...
CVE-2020-1656
The DHCPv6 Relay-Agent service, part of the Juniper Enhanced jdhcpd daemon shipped with Juniper Networks Junos OS has an Improper Input Validation vulnerability which will result in a Denial of Service DoS condition when a DHCPv6 client sends a specific DHPCv6 message allowing an attacker to...
Directory Traversal Vulnerability in ThinkAdmin v6
ThinkAdmin is a backend management framework based on the latest ThinkPHP V6 development, open source using the MIT protocol. ThinkAdmin v6 has a directory traversal vulnerability. Attackers can use the vulnerability through the POST request rules parameter to exploit the vulnerability to read...
The vulnerability of the TCP/IP protocol stack implementation in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the TCP/IP protocol stack implementation in the Windows operating system is related to errors in ICMPv6 packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure
The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the IPv6 traffic processing service of Cisco Small Business 250 Series, Cisco Small Business 350 Series, Cisco Small Business 350X Series, and Cisco Small Business 550X Series routers allows a attacker to cause a service failure.
The vulnerability of the IPv6 traffic processing service of Cisco Small Business 250 Series, Cisco Small Business 350 Series, Cisco Small Business 350X Series, and Cisco Small Business 550X Series routers is related to IPv6 traffic processing errors. Exploiting this vulnerability can allow a...
The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure
The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
kernel: Memory leak in sit_init_net() in net/ipv6/sit.c
A flaw was found in the way the sitinitnet function in the Linux kernel handled resource cleanup on errors. This flaw allows an attacker to use the error conditions to crash the system...
kernel: some ipv6 protocols not encrypted over ipsec tunnel
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...
Telmat AccessLog Code Injection Vulnerability
Telmat AccessLog is an access log monitoring product from Telmat France. The product protects public and private networks based on access logs. A code injection vulnerability exists in Telmat AccessLog versions prior to 6.0 TAL20180415, which arises from a network system or product not properly...