An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function e...
AFFECTED_PRODUCTS:
Debian Debian Linux,
Linux Linux Kernel,
Linux Linux Kernel
... (+3)
In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.
AFFECTED_PRODUCTS:
Matroska Libebml
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCell: 12.0.0.893.
AFFECTED_PRODUCTS:
Hancom Hcell
An Incomplete Cleanup vulnerability in Nonstop active routing (NSR) component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leading to Denial of Service (DoS).
On all Junos OS platforms, when NSR is enabled, a BGP flap will cause memory leak. A manu...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+4)
An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS).
On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+5)
An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service (DoS).
On all Junos OS and Junos OS Evolved...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos Os Evolved
... (+1)
A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause an rpd crash, leading to Denial of Service (DoS).
On all Junos OS and Junos OS Evolved platfor...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+6)
An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol (OFP) service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).
On all Junos OS Evolved platforms, when specific TCP packet...
AFFECTED_PRODUCTS:
Juniper Junos Os Evolved,
Juniper Junos Os Evolved,
Juniper Junos Os Evolved
... (+5)
A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).
In a Juniper Flow Monitoring (jflow) scenario route churn...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+3)
An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device.
If the "tcp-reset" option is added to the "reject" action in an IPv6 filter which mat...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+7)
A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).
In a remote access VPN scenario, if a "tcp-encap-profile" is configured and a sequence of specific packe...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+6)
An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).
If a high rate of specific valid packets are processed by the routing engine (RE) this will...
AFFECTED_PRODUCTS:
Juniper Junos Os Evolved,
Juniper Junos Os Evolved,
Juniper Junos Os Evolved
... (+3)
An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker with low privileges to cause a denial of service.
If a scaled configuration for Source class usage (SCU) / destination class usage (DCU) (mor...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+4)
A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS).
If a specific IPv4 UDP packet is received and sent to the Routing Engine (RE) packetio crashes...
AFFECTED_PRODUCTS:
Juniper Junos Os Evolved,
Juniper Junos Os Evolved,
Juniper Junos Os Evolved
... (+1)
A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the Flow-processing Daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos).
On SRX Series devices w...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+4)
An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows a unauthenticated, adjacent attacker to cause a Denial of Service (DoS).
When MPLS packets are meant to be sent to a flexible tunnel inter...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+4)
A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS).
If an MX Series device receives PTP packets on an MPC3E that doesn't s...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+3)
An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions.
In an Abstracted Fabric (AF) scenario if routing-instances (RI) are co...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+3)
A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS).
If an attacker sends a specific BGP UPDATE message to the device, this will cause...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+15)
An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS).
If an attacker sends high rate of specific ICMP traffic to a device with VX...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+3)
A Heap-based Buffer Overflow vulnerability in the Network Services Daemon (NSD) of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service (DoS).
On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, whi...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+6)
An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS), or Remote Code Execution (RCE) and obtain root privileges on the device.
This issue is caused by use of an in...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+6)
An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information.
A feature was introduced in version 3.1.0...
AFFECTED_PRODUCTS:
Juniper Paragon Active Assurance Control Center,
Juniper Paragon Active Assurance Control Center,
Juniper Paragon Active Assurance Control Center
... (+3)
An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series allows an attacker directly connected to the vulnerable system who repeatedly flaps DHCP subscriber sessions to cause a slow memory le...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+6)
An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker, using specific timing outside the attacker's control, to flap BGP sessions and cause the routing protocol daemon...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+13)
An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause the jdhcpd to consume all the CPU cycles resulting in a Denial of Service (DoS).
On Junos OS devices with forward...
AFFECTED_PRODUCTS:
Juniper Junos,
Juniper Junos,
Juniper Junos
... (+7)
ONTAP versions 9.4 and higher are susceptible to a vulnerability
which when successfully exploited could lead to disclosure of sensitive
information to unprivileged attackers when the object-store profiler
command is being run by an administrative user.
AFFECTED_PRODUCTS:
Netapp Clustered Data Ontap,
Netapp Clustered Data Ontap,
Netapp Clustered Data Ontap
... (+4)
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This c...
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Linux Linux Kernel,
Red Hat Enterprise Linux
... (+2)
A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the X-Forwarded-For function in the header.
AFFECTED_PRODUCTS:
Ujcms Ujcms
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Edge Chromium
File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file.
AFFECTED_PRODUCTS:
Sigb Pmb
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Edge Chromium
A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. This issue affects some unknown processing of the file admin/cms_template.php. The manipulation of the argument t_name/t_path leads to sql injection. The attack may be initiated remotely. The exploit has...
AFFECTED_PRODUCTS:
Foru Cms Project Foru Cms
A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /auth/user/all.api of the component Admin Module. The manipulation of the argument id leads to improper ownership management. The attack may be launched...
AFFECTED_PRODUCTS:
Meiyou Big Whale
Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter.
AFFECTED_PRODUCTS:
Flient Smart Lock Advanced Firmware
The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.
AFFECTED_PRODUCTS:
Hozard Alarm System
Hozard alarm system (Alarmsysteem) v1.0 is vulnerable to Improper Authentication. Commands sent via the SMS functionality are accepted from random phone numbers, which allows an attacker to bring the alarm system to a disarmed state from any given phone number.
AFFECTED_PRODUCTS:
Hozard Alarm System
Missing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow attackers to create a cloned tag via brief physical proximity to one of the original tags, which results in an attacker being able to bring the alarm system to a disarmed state.
AFFECTED_PRODUCTS:
Hozard Alarm System
A default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker to bring the alarm system to a disarmed state.
AFFECTED_PRODUCTS:
Hozard Alarm System
Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface, in combination with certain design choices, an attacker can unlock the Flient Smart Door Lock by replacing the fingerprint that is stored on the scanner.
AFFECTED_PRODUCTS:
Flient Smart Lock Advanced Firmware
The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This could allow an attacker to perform a brute force on the SMS authentication, to bring the alarm system to a disarmed state.
AFFECTED_PRODUCTS:
Hozard Alarm System
A vulnerability classified as problematic was found in qkmc-rk redbbs 1.0. Affected by this vulnerability is an unknown functionality of the component Nickname Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public a...
AFFECTED_PRODUCTS:
Qkmc-Rk Redbbs
Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to arbitrary command execution by abusing the configuration settings. The `Home > Preference` page exposes a list of system settings such as `Run Mode`, `Jwt Secret`, `Node Secret` and `Terminal Start Command`. While the UI...
AFFECTED_PRODUCTS:
Nginxui Nginx Ui,
Nginxui Nginx Ui
Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using `DefaultQuery`, the `"desc"` and `"id"` values are used as default values if the query parameters are not set....
AFFECTED_PRODUCTS:
Nginxui Nginx Ui,
Nginxui Nginx Ui
A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=reset_admin_psw. The manipulation leads to weak password recovery. The attack can be initiated remotely. The exploit has been disclosed to the publi...
AFFECTED_PRODUCTS:
Foru Cms Project Foru Cms
A vulnerability classified as problematic has been found in CodeAstro Simple Banking System 1.0. This affects an unknown part of the file createuser.php of the component Create a User Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit ha...
AFFECTED_PRODUCTS:
Codeastro Simple Banking System
A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file dishes.php. The manipulation of the argument res_id leads to cross site scripting. The attack may be launched remotely. The explo...
AFFECTED_PRODUCTS:
Codeastro Online Food Ordering System
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /new_item of the component New Item Creation Page. The manipulation of the argument new_item leads to cross site...
AFFECTED_PRODUCTS:
Codeastro Pos And Inventory Management System
A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public...
AFFECTED_PRODUCTS:
Httpdx Project Httpdx