network virtualization vulnerabilities and exploits

(subscribe to this query)

10

CVSSv3

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle...

Oracle Secure Global Desktop 5.6

10

CVSSv3

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle ...

Oracle Secure Global Desktop 5.6

9.9

CVSSv3

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle S...

Oracle Secure Global Desktop 5.6

9.8

CVSSv3

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 byte...

Haxx Libcurl Fedoraproject Fedora 37 Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Microsoft Windows 10 22h2 Microsoft Windows 11 21h2 Microsoft Windows 11 22h2 Microsoft Windows 11 23h2 Microsoft Windows 10 1809 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microsoft Windows 10 21h2

9 Github repositories2 Articles

9.8

CVSSv3

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during exe...

Golang Go

3 Github repositories

9.8

CVSSv3

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

Gnupg Libksba Gpg4win Gpg4win Gnupg Vs-desktop Gnupg Gnupg

9.8

CVSSv3

Libksba prior to 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Gnupg Libksba Debian Debian Linux 10.0 Debian Debian Linux 11.0

9.8

CVSSv3

A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callb...

Systemd Project Systemd 240 Netapp Active Iq Unified Manager -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -

9.8

CVSSv3

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not dis...

1 Github repository1 Article

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook