Lucene search
+L

6501 matches found

F5 Networks
F5 Networks
added 2023/10/09 5:26 p.m.35 views

K000137187: GlibC vulnerability CVE-2023-4911

Security Advisory Description A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBCTUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBCTUNABLES environment variables when launching binaries with...

7.8CVSS7.2AI score0.81422EPSS
SaveExploits28
F5 Networks
F5 Networks
added 2023/10/03 4:39 p.m.35 views

K000137105: libvpx vulnerability CVE-2023-5217

Security Advisory Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High CVE-2023-5217 Impact There is no impac...

8.8CVSS7.9AI score0.49013EPSS
SaveExploits3
F5 Networks
F5 Networks
added 2023/08/11 10:31 p.m.35 views

K000135831: Node.js vulnerability CVE-2023-32067

Security Advisory Description c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interpret...

7.5CVSS6.6AI score0.01577EPSS
SaveExploits0Affected Software16
F5 Networks
F5 Networks
added 2023/07/27 6:54 a.m.35 views

K000135627: Oracle MySQL vulnerability CVE-2023-22057

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

4.9CVSS5.1AI score0.01372EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/06/29 9:38 p.m.35 views

K000135312: BIND vulnerability CVE-2023-2828

Security Advisory Description Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the max-cache-size statement i...

7.5CVSS7.2AI score0.03776EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/06/12 5:32 p.m.35 views

K000135001: Python URLlib3 vulnerability CVE-2019-11236

Security Advisory Description In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter. CVE-2019-11236 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development...

6.1CVSS8AI score0.02056EPSS
SaveExploits1
F5 Networks
F5 Networks
added 2023/05/22 11:36 p.m.35 views

K000134735: Intel BIOS vulnerability CVE-2022-33894

Security Advisory Description Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2022-33894 Impact There is no impact; F5 products are not affected by this vulnerability. Securit...

7.8CVSS7.5AI score0.00247EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 8:3 p.m.35 views

K96003129: Intel CPU vulnerability CVE-2020-24489

Security Advisory Description Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-24489 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5...

8.8CVSS7.2AI score0.00352EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 8:2 p.m.35 views

K46303125: LibTIFF vulnerability CVE-2016-3990

Security Advisory Description Heap-based buffer overflow in the horizontalDifference8 function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image to tiffcp. CVE-2016-3990 Impact There is no...

7.8CVSS8.5AI score0.03886EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 8:2 p.m.35 views

K29280193: BIG-IP Configuration utility vulnerability CVE-2019-6597

Security Advisory Description When authenticated administrative users run commands in the Traffic Management User Interface TMUI, also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. CVE-2019-6597 Impact BIG-IP and Enterprise Manager This...

7.2CVSS7.3AI score0.01274EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 8:2 p.m.35 views

K49440608: TMOS vulnerability CVE-2018-5509

Security Advisory Description When a specifically configured virtual server receives traffic of an undisclosed nature, the Traffic Management Microkernel TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration that exposes this issue is n...

7.8CVSS7.5AI score0.02808EPSS
SaveExploits0Affected Software8
F5 Networks
F5 Networks
added 2023/02/21 8:2 p.m.35 views

K43404629: F5 SSH server key size vulnerability CVE-2020-5917

Security Advisory Description The BIG-IP and BIG-IQ host OpenSSH servers use keys less than 2048 bits that are no longer considered secure. CVE-2020-5917 Impact The BIG-IP system may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications. Some security scanners, such as the...

5.9CVSS6.2AI score0.00523EPSS
SaveExploits0Affected Software12
F5 Networks
F5 Networks
added 2023/02/21 8:0 p.m.35 views

K29149494: iControl REST vulnerability CVE-2019-6637

Security Advisory Description Application logic abuse of ASM REST endpoints can lead to instability of BIG-IP system. Exploitation of this issue causes excessive memory consumption which results in the Linux kernel triggering OOM killer on arbitrary processes. The attack requires an authenticated...

6.5CVSS6.2AI score0.01461EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:59 p.m.35 views

K13053402: TMM vulnerability CVE-2016-7468

Security Advisory Description An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db...

5.9CVSS6.7AI score0.01766EPSS
SaveExploits0Affected Software10
F5 Networks
F5 Networks
added 2023/02/21 7:59 p.m.35 views

K42534513: Multiple PeopleSoft Enterprise PeopleTools vulnerabilities

Security Advisory Description CVE-2018-3129 Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Portal. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with...

6.1CVSS5.2AI score0.0211EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:59 p.m.35 views

K54562183: BIG-IP PEM vulnerability CVE-2018-5503

Security Advisory Description TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action. CVE-2018-5503 Impact An attacker may be able to cause a remote denial of service DoS. Security Advisory Status ...

7.5CVSS7.6AI score0.01713EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:58 p.m.36 views

K15155: OpenSSH vulnerability CVE-2007-3102

Security Advisory Description Unspecified vulnerability in the linuxauditrecordevent function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. CVE-2007-3102 Impact None. F5 products...

4.3CVSS6.6AI score0.02342EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:58 p.m.35 views

K65397301: iRules RESOLVER::summarize memory leak vulnerability CVE-2021-23049

Security Advisory Description When the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an increase in Traffic Management Microkernel TMM memory utilization resulting in an out-of-memory condition and a denial-of-service DoS. CVE-2021-23049 Impact...

7.5CVSS7.5AI score0.00961EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:58 p.m.35 views

K06440657: BIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2021-23001

Security Advisory Description The upload functionality in BIG-IP Advanced WAF and ASM allows an authenticated user to upload files to the BIG-IP system using a call to an undisclosed iControl REST endpoint. CVE-2021-23001 Impact An authenticated malicious user can upload malicious files to use in...

4.3CVSS5.3AI score0.00572EPSS
SaveExploits0Affected Software2
F5 Networks
F5 Networks
added 2023/02/21 7:58 p.m.35 views

K88474783: BIG-IP DoS profile vulnerability CVE-2020-5879

Security Advisory Description Under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied. CVE-2020-5879 Impact The affected system sends some requests to the back-end server without encryption, possibly leaki...

7.5CVSS7.5AI score0.00792EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:57 p.m.35 views

K13434228: Apache Struts vulnerability CVE-2012-0392

Security Advisory Description The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...

6.8CVSS9.5AI score0.98EPSS
SaveExploits2
F5 Networks
F5 Networks
added 2023/02/21 7:57 p.m.35 views

K16352404: BIG-IQ DCD vulnerability CVE-2021-22996

Security Advisory Description When set up for auto failover, a BIG-IQ Data Collection Device DCD cluster member that receives an undisclosed message may cause the corosync process to abort. This behavior may lead to a denial-of-service DoS and impact the stability of a BIG-IQ high availability HA...

7.5CVSS7.4AI score0.00973EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:56 p.m.35 views

K12936322: BIG-IP restjavad vulnerability CVE-2020-5912

Security Advisory Description The restjavad process dump command does not follow current best coding practices and may overwrite arbitrary files. CVE-2020-5912 Impact A locally authenticated attacker may exploit this vulnerability by overwriting arbitrary files on the file system. Security Adviso...

7.1CVSS6.9AI score0.00321EPSS
SaveExploits0Affected Software14
F5 Networks
F5 Networks
added 2023/02/21 7:56 p.m.35 views

K01993501: Linux kernel vulnerability CVE-2016-10906

Security Advisory Description An issue was discovered in drivers/net/ethernet/arc/emacmain.c in the Linux kernel before 4.5. A use-after-free is caused by a race condition between the functions arcemactx and arcemactxclean. CVE-2016-10906 Impact There is no impact; F5 products are not affected by...

7CVSS6.3AI score0.0037EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:56 p.m.35 views

K22251611: Attack signature check security exposure

Security Advisory Description BIG-IP Advanced WAF and BIG-IP ASM systems incorrectly handle certain requests. This issue occurs when the following condition is met: BIG-IP Advanced WAF and BIG-IP ASM handle a malicious request when a parameter with Base64 decoding is enabled. Impact The attack...

6.6AI score
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:56 p.m.35 views

K61643620: BIG-IP TMUI XSS vulnerability CVE-2021-23038

Security Advisory Description A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. CVE-2021-23038 Impact An authenticated attacker may exploit...

9CVSS7.5AI score0.00916EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
added 2023/02/21 7:55 p.m.35 views

K87141725: BIG-IP APM redirect vulnerability CVE-2017-0302

Security Advisory Description Insufficient boundary checks on the request URL may cause the tmm process to assert when the user is redirected back to the original request URL following successful authentication to the BIG-IP APM system. CVE-2017-0302 Impact An authenticated user with an establish...

5.3CVSS5.4AI score0.0074EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:55 p.m.35 views

K77215791: Linux kernel vulnerability CVE-2017-7277

Security Advisory Description The TCP stack in the Linux kernel through 4.10.6 mishandles the SCMTIMESTAMPINGOPTSTATS feature, which allows local users to obtain sensitive information from the kernels internal socket data structures or cause a denial of service out-of-bounds read via crafted syst...

7.1CVSS6.5AI score0.00391EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:55 p.m.35 views

K31833420: Multiple Oracle Java SE vulnerabilities

Security Advisory Description CVE-2022-21305 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and...

5.3CVSS4.7AI score0.07748EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:55 p.m.35 views

K48209417: PostgreSQL vulnerabilities CVE-2018-10915 and CVE-2018-10925

Security Advisory Description CVE-2018-10915 A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrust...

8.5CVSS8.1AI score0.05154EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:54 p.m.35 views

K25061316: BIND vulnerability CVE-2016-9778

Security Advisory Description An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was...

7.5CVSS6.5AI score0.06843EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:54 p.m.35 views

K04146019: Linux kernel vulnerability CVE-2010-5332

Security Advisory Description In the Linux kernel before 2.6.37, an out of bounds array access happened in drivers/net/mlx4/port.c. When searching for a free entry in either mlx4registervlan or mlx4registermac, and there is no free entry, the loop terminates without updating the local variable fr...

5.6CVSS5.2AI score0.00387EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:53 p.m.35 views

K02138183: BIND vulnerability CVE-2016-9147

Security Advisory Description named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a response containing an inconsistency among the DNSSEC-related RRsets. CVE-2016-9147 Impact When the BIND...

7.5CVSS7.6AI score0.24788EPSS
SaveExploits0Affected Software10
F5 Networks
F5 Networks
added 2023/02/21 7:50 p.m.35 views

K60250153: Linux kernel vulnerability CVE-2017-1000112

Security Advisory Description Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSGMORE ipappenddata calls ipufoappenddata to append. However in between two send calls, the append path can be switched from UFO to non-UFO one, which lead...

7CVSS6.7AI score0.20797EPSS
SaveExploits19
F5 Networks
F5 Networks
added 2023/02/21 7:49 p.m.35 views

K45611803: TMM vulnerability CVE-2018-5530

Security Advisory Description F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb". CVE-2018-5530 Impact HPACK bombs are designed to consume an abnormal amount of memory resources on a target system, which can...

7.5CVSS7.5AI score0.01782EPSS
SaveExploits0Affected Software9
F5 Networks
F5 Networks
added 2023/02/21 7:41 p.m.35 views

K17563: Apache Struts vulnerability CVE-2015-2992

Security Advisory Description Arbitrary script can be executed when JSP files are exposed to be accessed directly. Affected versions are Struts 2.0.0 - 2.3.16.3. CVE-2015-2992 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product...

6.1CVSS7AI score0.05757EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:39 p.m.35 views

K42558402: Linux kernel vulnerability CVE-2018-5814

Security Advisory Description In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operations can be exploited to trigger a use-after-free condition or a NULL pointer dereference by sending multiple U...

7CVSS6.3AI score0.0038EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:39 p.m.35 views

K06223540: F5 TCP vulnerability CVE-2015-8240

Security Advisory Description The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options,...

7.5CVSS7.5AI score0.01765EPSS
SaveExploits0Affected Software10
F5 Networks
F5 Networks
added 2023/02/21 7:27 p.m.35 views

K73761475: MySQL Memcached vulnerability CVE-2017-3633

Security Advisory Description Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Memcached. Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

6.5CVSS6.2AI score0.02952EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:25 p.m.35 views

K82350223: MySQL vulnerabilities CVE-2018-2766, CVE-2018-2769, CVE-2018-2771, CVE-2018-2773, and CVE-2018-2775

Security Advisory Description CVE-2018-2766 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via...

6.8CVSS6AI score0.03592EPSS
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:6 p.m.35 views

K23520761: BIG-IP ASM and BIG-IP AFM/BIG-IP Analytics vulnerability CVE-2018-5505

Security Advisory Description On F5 BIG-IP 13.1.0 - 13.1.0.3, when ASM and one or more of these modules AFM/AVR are provisioned, the Traffic Management Microkernel TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is se...

5.9CVSS6.1AI score0.02083EPSS
SaveExploits0Affected Software3
F5 Networks
F5 Networks
added 2023/02/21 7:0 p.m.35 views

K07082049: NTP vulnerability CVE-2017-6462

Security Advisory Description Buffer overflow in the legacy Datum Programmable Time Server DPTS refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device. CVE-2017-6462 Impact This vulnerability allows local users ...

7.8CVSS7.1AI score0.00491EPSS
SaveExploits0Affected Software23
F5 Networks
F5 Networks
added 2023/02/21 6:59 p.m.35 views

K34508112: Pango vulnerability CVE-2019-1010238

Security Advisory Description Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pangolog2visgetembeddinglevels, assignment of nchars and the loop condition. The attack vecto...

9.8CVSS9.2AI score0.06274EPSS
SaveExploits1
F5 Networks
F5 Networks
added 2023/02/21 6:55 p.m.35 views

K95120415: NGINX Controller AVRD vulnerability CVE-2020-5895

Security Advisory Description AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the socket. A local system attacker can make AVRD segmentation fault SIGSEGV by writing malformed messages to the...

7.8CVSS7.6AI score0.00304EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 6:55 p.m.35 views

K50543013: libarchive vulnerability CVE-2017-5601

Security Advisory Description An error in the lhareadfileheader1 function archivereadsupportformatlha.c in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds read memory access and subsequently cause a crash via a specially crafted archive. CVE-2017-5601 Impact No F5 products ar...

7.5CVSS7.7AI score0.04447EPSS
SaveExploits0Affected Software16
F5 Networks
F5 Networks
added 2023/02/21 6:54 p.m.35 views

K65720640: BIG-IP SSL state mirroring vulnerability CVE-2020-5886

Security Advisory Description BIG-IP systems setup for connection mirroring in a High Availability HA pair transfers sensitive cryptographic objects over an insecure communications channel. This is a control plane issue which is exposed only on the network used for connection mirroring...

9.1CVSS8.8AI score0.00809EPSS
SaveExploits0Affected Software11
F5 Networks
F5 Networks
added 2023/02/21 6:54 p.m.35 views

K65615624: BIG-IP FastL4 TMM vulnerability CVE-2017-6166

Security Advisory Description In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server...

5.9CVSS6.1AI score0.01928EPSS
SaveExploits0Affected Software11
F5 Networks
F5 Networks
added 2023/02/21 6:54 p.m.36 views

K71265658: Intel CSME vulnerability CVE-2019-0153

Security Advisory Description Buffer overflow in subsystem in IntelR CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access. CVE-2019-0153 Impact An attacker can exploit this vulnerability with Converged Security and Manageme...

9.8CVSS9.8AI score0.01864EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 6:53 p.m.35 views

K63558580: BIG-IP crypto driver vulnerability CVE-2020-5872

Security Advisory Description When processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel TMM may stop responding and cause a failover event. CVE-2020-5872 Impact Hardware cryptographic acceleration fails an...

7.5CVSS7.4AI score0.01276EPSS
SaveExploits0Affected Software11
F5 Networks
F5 Networks
added 2023/02/21 6:53 p.m.35 views

K13255123: glibc vulnerability CVE-2017-18269

Security Advisory Description An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library aka glibc or libc6 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of t...

9.8CVSS7.7AI score0.04701EPSS
SaveExploits0
Total number of security vulnerabilities5000