Lucene search
+L

6690 matches found

F5 Networks
F5 Networks
•added 2013/01/23 12:00 a.m.•48 views

SOL14154 - SQL injection vulnerability from an authenticated source CVE-2012-3000

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column. Acknowledgements F5 would like to acknowledge SEC Consult Vulnerability Lab for bringing this issue to our attention, and for following the...

7.5CVSS2.7AI score0.0159EPSS
SaveExploits2References6
F5 Networks
F5 Networks
•added 2012/01/13 12:00 a.m.•48 views

SOL13279 - PHP vulnerability CVE-2009-4017

Recommended Action None Supplemental Information Note: This link will take you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge. SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view n...

5CVSS9.2AI score0.12041EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2010/06/21 12:00 a.m.•48 views

SOL11720 - Samba server vulnerability CVE-2010-2063

A buffer overflow in smbd for Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted field in a packet. Information about this advisory is available at the following location:...

7.5CVSS8.5AI score0.78558EPSS
SaveExploits5
F5 Networks
F5 Networks
•added 2008/06/30 12:00 a.m.•48 views

SOL8924 - Linux kernel vulnerability CVE-2007-3843

A flaw in the CIFS handling of the mount option sec= that did not enable integrity checking and did not produce any error message. Information about this advisory is available at the following location:...

4.3CVSS5.8AI score0.02624EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2008/06/17 12:00 a.m.•48 views

SOL8837 - OpenSSL DTLS off-by-one error - CVE-2007-4995

Description CVE-2007-4995 - Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors. Information about this advisory is available at the following location:...

9.3CVSS7.3AI score0.10512EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2008/04/13 12:00 a.m.•48 views

SOL8599 - Cross-site scripting vulnerability viewing logs from the Console section of the web management interface

A cross-site scripting XSS vulnerability in the Console feature of the BIG-IP and Enterprise Manager web management interface may allow for script excecution when viewing a log file that contains malicious content. Exploitation of this vulnerability would require an attacker to generate a log ent...

6.8CVSS5.3AI score0.02423EPSS
SaveExploits2
F5 Networks
F5 Networks
•added 2007/11/18 12:00 a.m.•48 views

SOL8108 - OpenSSL vulnerability CVE-2007-3108

F5 Product Development has determined that the BIG-IP and Enterprise Manager products use a vulnerable version of OpenSSL; however, the vulnerable code is not used in either TMM or in Apache on the BIG-IP system. The vulnerability is considered to be a local vulnerability and cannot be exploited...

1.2CVSS6.8AI score0.00404EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2026/07/08 6:30 a.m.•47 views

K000162135: Apache Flink vulnerability CVE-2026-35194

Security Advisory Description Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON...

8.1CVSS6.4AI score0.00381EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/11/22 7:58 p.m.•47 views

K000148691: qt vulnerabilities CVE-2022-25634 and CVE-2020-0570

Security Advisory Description CVE-2022-25634 Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. CVE-2020-0570 Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable...

7.5CVSS6.9AI score0.0196EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2024/11/19 2:54 a.m.•47 views

K000148607: OpenSSL vulnerability CVE-2022-1292

Security Advisory Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

10CVSS7.1AI score0.82612EPSS
SaveExploits5
F5 Networks
F5 Networks
•added 2024/09/03 4:40 p.m.•47 views

K000140908: MySQL Server vulnerability CVE-2024-21134

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Connection Handling. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via...

4.3CVSS4.7AI score0.00777EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/08/05 8:45 a.m.•47 views

K000140579: Apache vulnerability CVE-2024-39884

Security Advisory Description A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of...

6.2CVSS6.4AI score0.00889EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/06/18 5:51 p.m.•47 views

K000140039: Intel QAT vulnerability CVE-2023-32641

Security Advisory Description Improper input validation in firmware for IntelR QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access. CVE-2023-32641 Impact There is no impact; F5 products are not affected by this vulnerability. Securit...

8.8CVSS8.5AI score0.0031EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/06/03 8:25 p.m.•47 views

K000139880: Intel CPU/BIOS vulnerabilities CVE-2023-28402, CVE-2023-27504, and CVE-2023-28383

Security Advisory Description CVE-2023-28402 Improper input validation in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-27504 Improper conditions check in some IntelR BIOS Guard firmware may allow a privileged...

7.2CVSS6.7AI score0.00206EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/05/29 2:39 a.m.•47 views

K000139810: Oracle Java vulnerability CVE-2024-20919

Security Advisory Description Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK:...

5.9CVSS5.4AI score0.00799EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/05/20 12:08 a.m.•47 views

K000139678: MySQL Server vulnerability CVE-2024-21055

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

4.9CVSS5.2AI score0.00887EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/05/08 12:52 p.m.•47 views

K000138728: BIG-IP IPsec vulnerability CVE-2024-33608

Security Advisory Description When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2024-33608 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote unauthenticated attacker to...

7.5CVSS6.9AI score0.00593EPSS
SaveExploits0Affected Software12
F5 Networks
F5 Networks
•added 2024/05/02 11:24 a.m.•47 views

K000139489: PostgreSQL JDBC Driver vulnerability CVE-2024-1597

Security Advisory Description pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a...

10CVSS8.2AI score0.0481EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/04/09 3:36 p.m.•47 views

K000139236: Apache Traffic Server HTTP/2 CONTINUATION DoS attack vulnerability CVE-2024-31309

Security Advisory Description HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server. Version from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.3 are affected. CVE-2024-31309 Impact There is no impact; F5 products are not affected by this...

7.5CVSS8AI score0.94615EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2024/03/22 4:01 p.m.•47 views

K000138989: BIND vulnerability CVE-2023-5517

Security Advisory Description A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. Th...

7.5CVSS7.6AI score0.01242EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/02/27 7:14 p.m.•47 views

K000138731: Linux vulnerability CVE-2023-3776

Security Advisory Description A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in...

7.8CVSS6.9AI score0.00508EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2024/02/20 11:26 p.m.•47 views

K000138668: OpenSSL vulnerability CVE-2023-6237

Security Advisory Description Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVPPKEYpubliccheck to check RSA public keys may experience long delays. Where the key that is being checked has been obtained fro...

5.9CVSS6.5AI score0.02303EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/02/14 1:47 p.m.•47 views

K000135946: BIG-IP PEM vulnerability CVE-2024-23982

Security Advisory Description When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023...

7.5CVSS7.6AI score0.00515EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2024/02/14 1:33 p.m.•47 views

K000137522: BIG-IP iControl REST vulnerability CVE-2024-22093

Security Advisory Description When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary. CVE-2024-22093 Impact This...

8.7CVSS8.8AI score0.00835EPSS
SaveExploits0Affected Software12
F5 Networks
F5 Networks
•added 2024/02/06 8:47 p.m.•47 views

K000138508: mod_ssl vulnerability CVE-2004-0700

Security Advisory Description Format string vulnerability in the modproxy hook functions function in sslenginelog.c in modssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are...

7.5CVSS7.2AI score0.05802EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/02/02 8:18 a.m.•47 views

K000138462: Oracle Java vulnerabilities CVE-2024-20922, CVE-2024-20923

Security Advisory Description CVE-2024-20922 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to...

3.1CVSS4.4AI score0.00601EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/10/13 8:11 a.m.•47 views

K000137229: BIND vulnerability CVE-2022-38178

Security Advisory Description By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources. CVE-2022-38178 Impact DNS...

7.5CVSS7.2AI score0.02518EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/05/24 9:20 p.m.•47 views

K000134768: Linux kernel vulnerability CVE-2022-4378

Security Advisory Description A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-4378 Impact A locally...

7.8CVSS7.1AI score0.00431EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/04/28 6:20 p.m.•47 views

K000133615: device-mapper-multipath vulnerability CVE-2022-41974

Security Advisory Description multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This c...

7.8CVSS7.5AI score0.00629EPSS
SaveExploits4Affected Software4
F5 Networks
F5 Networks
•added 2023/04/11 4:29 p.m.•47 views

K000133447: Linux kernel vulnerability CVE-2022-32250

Security Advisory Description net/netfilter/nftablesapi.c in the Linux kernel through 5.18.1 allows a local user able to create user/net namespaces to escalate privileges to root because an incorrect NFTSTATEFULEXPR check leads to a use-after-free. CVE-2022-32250 Impact For products with None in...

7.8CVSS6.9AI score0.02914EPSS
SaveExploits6
F5 Networks
F5 Networks
•added 2023/03/14 3:32 p.m.•47 views

K000132965: Apache vulnerability CVE-2023-27522

Security Advisory Description HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client. CVE-2023-27522...

7.5CVSS7.9AI score0.02134EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/22 1:06 a.m.•47 views

K000132643: Apache HTTP server vulnerability CVE-2022-36760

Security Advisory Description Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4...

9CVSS7.3AI score0.01879EPSS
SaveExploits0Affected Software15
F5 Networks
F5 Networks
•added 2023/02/21 8:00 p.m.•47 views

K21344224: Lazy FP state restore vulnerability CVE-2018-3665

Security Advisory Description System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel. CVE-2018-3665 A Floating-Point FP state...

5.6CVSS7.5AI score0.00627EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 8:00 p.m.•47 views

K11932200: glibc vulnerability CVE-2019-1010023

Security Advisory Description GNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ld...

8.8CVSS8.7AI score0.03044EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 8:00 p.m.•47 views

K54229563: Python vulnerability CVE-2010-3492

Security Advisory Description The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the accept function, which makes it easier...

5CVSS7.2AI score0.03206EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:59 p.m.•47 views

K15783: Kerberos vulnerability CVE-2013-1417

Security Advisory Description dotgsreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.11 before 1.11.4, when a single-component realm name is used, allows remote authenticated users to cause a denial of service daemon crash via a TGS-REQ request that triggers an attempted...

3.5CVSS7.1AI score0.01932EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 7:58 p.m.•47 views

K05770600: Linux libuser vulnerability CVE-2015-3246

Security Advisory Description libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service inconsistent file state by causing an error during the modification. NOTE:...

7.2CVSS7.2AI score0.08799EPSS
SaveExploits11Affected Software20
F5 Networks
F5 Networks
•added 2023/02/21 7:58 p.m.•47 views

K79428827: BIG-IP APM OCSP vulnerability CVE-2021-23047

Security Advisory Description When BIG-IP APM performs Online Certificate Status Protocol OCSP verification of a certificate that contains Authority Information Access AIA, undisclosed requests may cause an increase in memory use. CVE-2021-23047 Impact This vulnerability allows a remote attacker ...

5.3CVSS5.6AI score0.00598EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 7:57 p.m.•47 views

K16729408: D-Bus vulnerability CVE-2020-12049

Security Advisory Description An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system...

5.5CVSS6.7AI score0.00569EPSS
SaveExploits1Affected Software12
F5 Networks
F5 Networks
•added 2023/02/21 7:57 p.m.•47 views

K35104614: Java SE vulnerability CVE-2017-10116

Security Advisory Description Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows...

8.3CVSS8.3AI score0.03386EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:55 p.m.•47 views

K23134279: Node.js vulnerability CVE-2016-2216

Security Advisory Description The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allows remote attackers to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unicode characters...

7.5CVSS8.6AI score0.07013EPSS
SaveExploits0Affected Software18
F5 Networks
F5 Networks
•added 2023/02/21 7:53 p.m.•47 views

K17157: Apache HTTP server vulnerability CVE-2015-0228

Security Advisory Description The luawebsocketread function in luarequest.c in the modlua module in the Apache HTTP Server through 2.4.12 allows remote attackers to cause a denial of service child-process crash by sending a crafted WebSocket Ping frame after a Lua script has called the wsupgrade...

5CVSS6AI score0.16472EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:47 p.m.•47 views

K17381: OpenJDK vulnerability CVE-2014-0428

Security Advisory Description Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. CVE-2014-0428 Impact There is no impact; F5 products...

10CVSS5.5AI score0.06051EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:42 p.m.•47 views

K3568: DNS denial of service vulnerability - CAN-2004-0789

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

5CVSS6.5AI score0.02765EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:40 p.m.•47 views

K73455417: obs-service-extract_file package vulnerability CVE-2016-4007

Security Advisory Description Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal...

10CVSS9.6AI score0.02474EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 7:39 p.m.•47 views

K74759095: SafeNet External Network HSM script vulnerability CVE-2017-6165

Security Advisory Description In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM...

9.8CVSS9.4AI score0.01925EPSS
SaveExploits0Affected Software11
F5 Networks
F5 Networks
•added 2023/02/21 7:38 p.m.•47 views

K10600056: NTP vulnerability CVE-2015-5300

Security Advisory Description It was found that ntpd did not correctly implement the threshold limitation for the '-g' option, which is used to set the time without any restrictions. CVE-2015-5300 Impact A man-in-the-middle attacker able to intercept network time protocol NTP traffic between a...

7.5CVSS7.5AI score0.0913EPSS
SaveExploits0Affected Software24
F5 Networks
F5 Networks
•added 2023/02/21 7:38 p.m.•47 views

K23873366: OpenSSL vulnerability CVE-2016-2177

Security Advisory Description OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service integer overflow and application crash or possibly have unspecified other impact by leveraging unexpected mallo...

9.8CVSS9.3AI score0.44505EPSS
SaveExploits1Affected Software25
F5 Networks
F5 Networks
•added 2023/02/21 7:29 p.m.•47 views

K14261: OpenSSL OCSP vulnerability CVE-2013-0166

Security Advisory Description OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for Online Certificate Status Protocol OCSP responses, which allow remote attackers to cause a denial-of-service DoS NULL pointer dereference and...

8AI score
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 7:27 p.m.•47 views

K3284: Buffer overflows in stub resolver libraries - CAN-2002-0029

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

8.8AI score
SaveExploits0
Total number of security vulnerabilities5000