CVE-2020-3257

Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 that are running Cisco IOS Software could allow an attacker to cause a denial of service DoS condition...

CVE-2020-3258

Cisco IOS Software CVE-2020-3258 affects Cisco 809/829 Industrial ISRs and CGR1000; a vulnerability in a diagnostic test CLI command can modify run-time memory, enabling an unauthenticated remote attacker or an authenticated local attacker to execute arbitrary code or cause a crash/reload. Exploi...

CVE-2020-3257 Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 that are running Cisco IOS Software could allow an attacker to cause a denial of service DoS condition...

CVE-2020-3257

CVE-2020-3257 affects the Cisco IOx Application Environment for IOS Software on Cisco 809/829 Industrial ISRs and CGR1000. ATLV/bounds checking issue in signaling packet handling can allow authenticated local attackers to execute arbitrary code with elevated privileges, while an adjacent attacker...

CVE-2020-3199 Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 that are running Cisco IOS Software could allow an attacker to cause a denial of service DoS condition...

CVE-2020-3199

Cisco IOx Application Environment for IOS Software on Cisco Industrial Routers (809/829 ISR) and CGR1000 running IOS Software is affected by multiple vulnerabilities that can allow either DoS or arbitrary code execution with elevated privileges. Specifically, CVE-2020-3199 describes an adjacent a...

CVE-2020-3210

CVE-2020-3210 affects Cisco IOS Software on Cisco 809/829 Industrial ISRs and CGR1000, where the CLI parsers for VDS-related commands fail to validate input. An authenticated local attacker with privilege level 15 can inject malicious input into VDS CLI arguments, gaining arbitrary commands execu...

CVE-2020-3205

CVE-2020-3205 — Cisco IOS inter-VM channel injection involves Cisco IOS Software on Cisco 809/829 Industrial ISRs and CGR1000, where insufficient validation of signaling packets to the Virtual Device Server (VDS) allows an unauthenticated, adjacent attacker to execute arbitrary shell commands wit...

Internet Bug Bounty: Industry-Wide MITM Vulnerability Impacting the JVM Ecosystem

I've been exploring the industry-wide scope of the use of HTTP to resolve dependencies in build infrastructure across the industry. What I unearthed was that some of the most popular libraries and two compilers were impacted by this vulnerability. Vulnerability CWE-829: Inclusion of Functionality...

Cisco 807, 809, and 829 Industrial Integrated Services Router Arbitrary Memory Write Vulnerability

The Cisco 807, 809, and 829 Industrial Integrated Services Routers are router products from Cisco, Inc.IOS Software is a set of operating systems developed by Cisco for its network devices that run on them. An arbitrary memory write vulnerability exists in the test subsystem embedded in the IOS...

Amazon Linux AMI : collectd (ALAS-2017-829)

Infinite loop due to incorrect interaction of parsepacket and parsepartsignsha256 functions : Collectd contains an infinite loop due to how the parsepacket and parsepartsignsha256 functions interact. If an instance of collectd is configured with 'SecurityLevel None' and with empty 'AuthFile'...

CVE-2015-6289

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

tomshardware.com XSS vulnerability

Vulnerable URL: http://www.tomshardware.com/index.php?ctrl=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 829 Google Pagerank| 7 VIP website status:| Yes Check tomshardware.com SSL connection:| Grade: A-...

Ubuntu: Security Advisory (USN-829-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...