97,012 results · Clear filters · Feed
-
High 8.3
A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication, wit…
-
High 8.8
Security Advisory 0221
An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on the device to trigger the Rip agent crash without providing valid credentials. Repeated exploitation reliably interrupts routing service on…
-
High 8.7
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who…
-
High 8.2
Security Advisory 0217
On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may potentia…
-
High 7.0
On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived keys, sen…
-
High 7.1
An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial …
-
High 7.2
A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unaut…
-
High 7.5
A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. …
-
High 7.5
A vulnerability exists in a system component that may, under certain conditions, disrupt the availability of affected s…
-
High 7.5
A vulnerability exists in a monitoring component that may, under certain conditions, allow security controls to be circ…
-
High 7.5
A security vulnerability exists in AthonetOS that may allow an unauthorized party to affect service operation or gain a…
-
High 8.1
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being full…
-
High 7.5
A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate …
-
High 7.0
A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when role…
-
High 8.2
A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When pro…
-
High 7.1
A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator u…
-
High 8.3
Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate
Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExportController behavior applies userHasAccess() only to the import() and export() page actions, while Backend\Classes\Controller::execAjaxHandlers() dis…
-
High 7.0
Docker Engine overlay-network encryption rules are not restored after a firewalld reload
Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. T…
-
High 7.7
Cluster-API proxy overwrites forwarded client identity with its own
SwarmKit's Cluster-API proxy can overwrite a forwarded client's TLS identity with an intermediary manager's identity. WithMetadataForwardTLSInfo replaces outgoing metadata with a copy of the incoming metadata, discarding the redirect guard's changes when buil…
-
High 7.5
Everest Forms <= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach_entry_files
The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach_entry_files() function. This is due to the function attaching any entry field value whose meta key matches /signature_/ to t…
-
High 7.7
Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the …
-
High 8.4
In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size unde…
-
High 8.4
In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap d…
-
High 7.8
In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead…
-
High 7.8
In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This coul…
-
High 8.4
In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due …
-
High 7.8
In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. Thi…
-
High 7.8
In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to lo…
-
High 7.5
In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undr…
-
High 7.8
In s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could …
-
High 7.5
In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process…
-
High 7.8
In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This coul…
-
High 7.5
In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to …
-
High 7.8
In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could l…
-
High 7.5
In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap du…
-
High 8.4
In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier …
-
High 7.8
In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could…
-
High 7.8
In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic erro…
-
High 7.5
In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abo…
-
High 7.8
In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This coul…