Cisco Small Business IP phones SPA 300 and SPA 500 Information Disclosure Vulnerabilities

Cisco Small Business IP phones SPA 300 and SPA 500 are the SPA 300 and SPA 500 series of IP VoIP products from Cisco. A security vulnerability exists in the default configuration of Cisco Small Business IP phones SPA 300 version 7.5.5 and SPA 500 version 7.5.5. Because the program fails to set up...

CVE-2015-0670

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...

Default configuration

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...

CVE-2015-0670

Cisco Small Business SPA300 and SPA500 IP phones running firmware version 7.5.5 are affected by CVE-2015-0670 due to improper authentication in the default configuration. A crafted XML request can allow an unauthenticated remote attacker to read audio-stream data or originate telephone calls. The...

CVE-2015-2177

Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...

Code injection

Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...

CVE-2015-2177

Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...

CVE-2015-2177

Siemens SIMATIC S7-300 CPU family is affected by CVE-2015-2177. Remote attackers can trigger a denial-of-service (defect-mode transition) by sending crafted packets to Port 102/TCP (ISO-TSAP) or via Profibus, without authentication. Impact is a network-based DoS; recovery may require a cold resta...

CVE-2015-2177

Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service defect-mode transition via crafted packets on 1 TCP port 102 or 2 Profibus...

PT-2015-5645

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-300 CPU devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition. This can be achieved by sending crafted packets on either TCP...

D-Link Devices HNAP SOAPAction-Header Command Execution

Different D-Link Routers are vulnerable to OS command injection in the HNAP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command. This module has been tested on a DIR-645 device. The following devices are also reported as affected:...

Kali Linux

Kali Linux Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security Ltd. Mati Aharoni, Devon Kearns and Raphaël Hertzog are the core developers. Kali Linux is preinstalled with over 300...

CVE-2014-8479

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

Design/Logic Flaw

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

Design/Logic Flaw

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...

CVE-2014-8478

The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service reboot via malformed HTTP requests...

CVE-2014-8478

Siemens SCALANCE X-300 family switches (all versions prior to V4.0) and SCALANCE X-408 (all versions prior to V4.0) expose a remote denial-of-service vulnerability in the device web/HTTP services. Malformed HTTP requests to the web server can cause the device to reboot, interrupting network conne...

CVE-2014-8479

The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial of service reboot via crafted FTP packets...

CVE-2014-8479

The CVE-2014-8479 entry affects Siemens SCALANCE X-300 switches (and X-408) with firmware before 4.0, where the FTP server component can be abused by remote authenticated users to trigger a reboot (DoS) via specially crafted FTP packets. Root cause centers on the FTP server handling of crafted tr...

Fedora 21 : kernel-3.17.8-300.fc21 (2015-0517)

The 3.17.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...