CVE-2020-3234: Use of Hard-coded Credentials

A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 could allow an authenticated but low-privileged, local attacker to log in to the Virtual...

CVE-2020-3199: Improper Input Validation

Multiple vulnerabilities in the Cisco IOx application environment of Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs and Cisco 1000 Series Connected Grid Routers CGR1000 that are running Cisco IOS Software could allow an attacker to cause a denial of service DoS condition...

CVE-2020-3208: Undefined Security Weakness

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers Industrial ISRs could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient acce...

Internet Bug Bounty: Industry-Wide MITM Vulnerability Impacting the JVM Ecosystem

I've been exploring the industry-wide scope of the use of HTTP to resolve dependencies in build infrastructure across the industry. What I unearthed was that some of the most popular libraries and two compilers were impacted by this vulnerability. Vulnerability CWE-829: Inclusion of Functionality...

Cisco 807, 809, and 829 Industrial Integrated Services Router Arbitrary Memory Write Vulnerability

The Cisco 807, 809, and 829 Industrial Integrated Services Routers are router products from Cisco, Inc.IOS Software is a set of operating systems developed by Cisco for its network devices that run on them. An arbitrary memory write vulnerability exists in the test subsystem embedded in the IOS...

Amazon Linux AMI : collectd (ALAS-2017-829)

Infinite loop due to incorrect interaction of parsepacket and parsepartsignsha256 functions : Collectd contains an infinite loop due to how the parsepacket and parsepartsignsha256 functions interact. If an instance of collectd is configured with 'SecurityLevel None' and with empty 'AuthFile'...

CVE-2015-6289

Cisco IOS 15.53M on Integrated Services Router ISR 800, 819, and 829 devices allows remote attackers to cause a denial of service memory consumption via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476...

tomshardware.com XSS vulnerability

Vulnerable URL: http://www.tomshardware.com/index.php?ctrl=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 829 Google Pagerank| 7 VIP website status:| Yes Check tomshardware.com SSL connection:| Grade: A-...

Ubuntu: Security Advisory (USN-829-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...