146 matches found
Cisco Aironet Access Points Denial of Service Vulnerability (CNVD-2017-32919)
The Cisco Aironet 1560, 2800, and 3800 Series Access Points are router access devices from Cisco, Inc. A denial of service vulnerability exists in the 802.11 association request frame handling in the Cisco Aironet 1560, 2800, and 3800 Series Access Points, which arises from a program that fails t...
Cisco Aironet 3800 Series Access Points Protected Management Frames User Denial of Service Vulnerability
A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device. The vulnerability exists because the affected device does not properl...
Oracle Human Resources Management System PeopleSoft unauthorized remote code execution vulnerability parsing-vulnerability warning-the black bar safety net
! A few months ago, I had the privilege of participating in several of Oracle's PeopleSoft construction project Safety Audit, the audit object mainly for the PeopleSoft series of Human Resources Management System, HRMS, and development tools package PeopleTool it. Throughout the online on the...
CVE-2016-9197
A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected...
CVE-2016-9197
CVE-2016-9197 affects Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers. The root cause is a vulnerability in the CLI command parser due to incorrect permissions assigned to configured users, enabling an authenticated, local attacker to obtain access to the underlying operating...
Cisco Mobility Express 2800 and 3800 Series Local Security Bypass Vulnerability
Cisco Mobility Express 2800 and 3800 Access Points are wireless products based on the Mobility Express solution from Cisco. A local security bypass vulnerability exists in the Cisco Mobility Express 2800 and 3800 series, which could be exploited by an attacker to bypass certain security...
Debian DSA-3800-1 : libquicktime - security update
Marco Romano discovered that libquicktime, a library for reading and writing QuickTime files, was vulnerable to an integer overflow attack. When opened, a specially crafted MP4 file would cause a denial of service by crashing the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
CVE-2017-3800
A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. Affected Products: This vulnerability affects all releases prior to the...
CVE-2017-3800
CVE-2017-3800 affects Cisco AsyncOS for the Email Security Appliance (ESA) content scanning engine. An unauthenticated, remote attacker could bypass configured message or content filters on attachments. Affected releases are all prior to the first fixed AsyncOS release; known affected: 9.7.1-066,...
CVE-2016-9221
A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause authentication to fail. Affected Products: This vulnerability affects Cisco Mobility...
Cisco Mobility Express 2800 and 3800 Access Points Denial of Service Vulnerability
Cisco Mobility Express 2800 and 3800 Access Points are wireless products based on the Mobility Express solution from Cisco. A denial of service vulnerability exists in the Cisco Mobility Express 2800 and 3800 Access Points. An attacker could exploit this vulnerability to cause a denial of service...
Cisco Mobility Express 2800 and 3800 Access Points Denial of Service Vulnerability (CNVD-2017-01065)
Cisco Mobility Express 2800 and 3800 Access Points are wireless products based on the Mobility Express solution from Cisco. A denial of service vulnerability exists in the Cisco Mobility Express 2800 and 3800 Access Points. An attacker could exploit this vulnerability to cause a denial of service...
CVE-2016-6362
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...
CVE-2016-6362
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...
CVE-2016-6362
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...
CVE-2016-3800
CVE-2016-3800 describes a privilege-escalation flaw in the MediaTek video driver on Android One devices prior to 2016-07-05, allowing a crafted app to gain elevated privileges through Mediaserver/kernel context. Connected sources confirm the issue is tied to the MediaTek video driver and Android ...
CVE-2015-3800
The vulnerability CVE-2015-3800 affects Appleās DiskImages component: a memory corruption flaw in parsing malformed DMG images can allow local privilege escalation or cause a denial of service. Affected products include iOS versions before 8.4.1 and OS X versions before 10.10.5. The issue arises ...
CVE-2015-3800
The DiskImages component in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges or cause a denial of service memory corruption and application crash via a malformed DMG image...
CVE-2014-3800
CVE-2014-3800 affects XBMC 13.0, where .xbmc/userdata/sources.xml is stored with world-readable permissions. This allows a local attacker to read user names and passwords from that file. Several connected documents corroborate the impact and show that mitigation involves updating the affected Kod...
CVE-2013-5997
Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service device hang via unknown vectors, a different vulnerability than CVE-2013-5998...