Archive
January 2018
Vulnerabilities first published in this month (UTC), newest first.
1,275 results · Feed
-
Unscored —
Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthent…
-
Unscored —CVE-2017-18016 Public exploit
Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive informa…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. T…
-
Unscored —
VMware Workstation and Fusion contain an integer overflow vulnerability in VMware NAT service when IPv6 mode is enabled…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenti…
-
Unscored —CVE-2018-5333 Public exploit
In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning…
-
Unscored —
In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA…
-
Medium 6.5
Junos OS: A crafted MPLS packet may lead to a kernel crash
A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is accessed, this may result in a kernel crash leading to a denial…
-
High 8.2
MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.
On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashe…
-
Critical 9.8
Junos: Unauthenticated Remote Code Execution through J-Web interface
A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper …
-
Medium 4.3
ScreenOS: Etherleak vulnerability found on ScreenOS device
Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Netw…
-
Medium 6.5
Junos Space: Local File Inclusion Vulnerability
A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system.
-
Medium 5.4
Junos Space: Reflected XSS vulnerability in Junos Space management interface
A reflected cross site scripting (XSS) vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Spac…
-
Unscored —
An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through …
-
High 7.4
Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.
QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 1…