63 matches found
CVE-2019-2346
Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ807...
CVE-2019-2346
CVE-2019-2346 affects Qualcomm Snapdragon family firmware (Snapdragon Compute, Snapdragon Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wired Infrastructure/Networking) impacting IPQ8074, QCA8081, QCS404/QCS405/QCS605 and various SD/SDM platforms. Description: a memory overwrite loop trigg...
PRODSECBUG-2346: Stored cross-site scripting in the admin panel
More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13...
CVE-2018-2346
CVE-2018-2346 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-2346
An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway ALG. Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with...
CVE-2017-2346
The CVE-2017-2346 issue affects Juniper Networks Junos OS on MX platforms, where an ALG handling of large fragmented packets can crash the MS-MPC/MS-MIC Service PIC, causing extended DoS. Impact is confined to specific Junos versions on MX hardware (e.g., 14.1X55-D30 to before 14.1X55-D35; 14.2R7...
CVE-2017-2346 MS-MPC or MS-MIC crash when passing large fragmented traffic through an ALG
An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway ALG. Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with...
Juniper Networks Junos OS MS-MPC or MS-MIC DoS Vulnerability
Junos OS is prone to a denial of service vulnerability when parsing large fragmented traffic through an ALG. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2016-2346
CVE-2016-2346 affects Allround Automations PL/SQL Developer prior to 11.0.6.1776. The vulnerability arises from verifying HTTP update data, allowing a man-in-the-middle to modify the client‑server data stream and execute arbitrary code with the user’s privileges. Affected version: PL/SQL Develope...
Allround Automations PL/SQL Developer v11 performs updates over HTTP
Overview Allround Automations PL/SQL Developer version 11 checks for updates over HTTP and does not verify updates before executing commands, which may allow an attacker to execute arbitrary code. Description CWE-345: Insufficient Verification of Data Authenticity - CVE-2016-2346 According to the...
CVE-2015-2346
Vulnerability: CVE-2015-2346 is an XXE flaw in Huawei SEQ Analyst prior to V200R002C03LG0001CP0022. An authenticated remote attacker can read arbitrary files via the req parameter. Affected product: Huawei SEQ Analyst. Root cause: XML External Entity processing. Impact: unauthorized file disclosu...
Huawei SEQ Analyst XXE Injection
Document Title: ============ Huawei SEQ Analyst - XML External Entity Injection XXE Release Date: =========== 15 Apr 2015 CVE-ID: ======= CVE-2015-2346 Product & Service Introduction: ======================= SEQ Analyst is a platform for business quality monitoring and management by individual us...
Ubuntu 14.04 LTS : curl vulnerabilities (USN-2346-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2346-1 advisory. Tim Ruehsen discovered that curl incorrectly handled partial literal IP addresses. This could lead to the disclosure of cookies to the wrong site, and...
CVE-2014-2346
The CVE-2014-2346 issue affects COPA-DATA zenon DNP3 NG driver (DNP3 master) and zenon DNP3 Process Gateway (DNP3 outstation). Affected versions are zenon DNP3 NG driver (7.10 SP0 up to 7.11 SP0 build 10238) and zenon DNP3 Process Gateway (7.11 SP0 build 10238 and prior). The root cause is improp...
HP-UX PHSS_43889 : s700_800 11.X OV DP7.00 HP-UX IA/PA - Cell Server patch
s700800 11.X OV DP7.00 HP-UX IA/PA - Cell Server patch : Potential security vulnerabilities have been identified with HP Data Protector. These vulnerabilities could be remotely exploited to allow an increase of privilege, create a Denial of Service DoS, or execute arbitrary code. References:...
HP-UX PHSS_43890 : s700_800 11.X OV DP7.00 HP-UX IA/PA - Core patch
s700800 11.X OV DP7.00 HP-UX IA/PA - Core patch : Potential security vulnerabilities have been identified with HP Data Protector. These vulnerabilities could be remotely exploited to allow an increase of privilege, create a Denial of Service DoS, or execute arbitrary code. References: CVE-2013-23...
COPA-DATA Improper Input Validation
OVERVIEW Automation software company Ing. Punzenberger COPA-DATA GmbH reported an improper input validation vulnerability affecting the DNP3 driver in the zenon SCADA software. The vulnerability was found based on the DNP3 research conducted by Adam Crain of Automatak and Chris Sistrunk of...
CVE-2013-2346
CVE-2013-2346 affects HP Storage Data Protector 6.2X (HP OpenView Data Protector). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors (ZDI-1870). HP published security guidance HPSBMU02895 and patches to resolve the issues, with af...