Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability

A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to a missing authentication process within the firmware upgrade function. An...

Intel Ethernet Products 代码问题漏洞

Intel Ethernet Products is a networking product from Intel Corporation USA. A security vulnerability exists in Intel Ethernet Products Network Adapters prior to version 27.3, which arises from an uncontrolled search path and can be exploited by an authenticated attacker to potentially enable...

SUSE CVE-2011-2930

Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...

HPESBGN04446 rev.2 - HPE Intel 500 Series Ethernet Controllers, INTEL-SA-00750, Intel Ethernet VMware Drivers Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port 560FLR-SFP+ Adapter -Prior to 1.12.3.0 HPE Ethernet 10Gb 2-port 560SFP+ Adapter -Prior to 1.12.3.0 HPE Ethernet 10Gb 2-port...

Intel® Ethernet Controllers and Adapters Advisory

Summary: A potential security vulnerability in some Intel® Ethernet Controllers and Adapters may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-36382 Description: Out-of-bounds write in firmware for som...

HPESBGN04447 rev.1 - HPE Intel E810 Series Ethernet Controllers, INTEL-SA-00770, Intel Network Adapter Software Advisory, Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Intel E810-XXVDA4 Ethernet 10/25Gb 4-port SFP28 Adapter for HPE - Prior to 4.01 Intel E810-CQDA2 Ethernet 100Gb 2-port QSFP28 Adapter for HPE - Prior to 4.01 Intel E810-CQDA2...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters relates to memory release errors, allowing an attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Webex Room Phone and Cisco Webex Share HDMI adapters is related to memory release errors. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted LLDP packets...

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2023-1223)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to...

SureBackup Ping Test Wrong Docker IP

Challenge A SureBackup Job's ping and application tests attempt to interact with an unexpected IP address of a Virtual Machine running Docker. Cause The SureBackup Job's recovery verification tests use the IP addresses reported to the VMware Environment by VMware Tools. Solution To control which ...

CVE-2022-3594

A vulnerability was found in intrcallback in drivers/net/usb/r8152.c in the BPF component in the Linux Kernel. The manipulation leads to logging excessive data, where an attack can be launched remotely. Mitigation This flaw can be mitigated by preventing the affected Realtek RTL8152/RTL8153 Based...

advanceadapters.com Cross Site Scripting vulnerability OBB-3079612

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-2767)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enabl...

CVE-2022-21622

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Adapters. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successf...

Researchers Uncover Covert Attack Campaign Targeting Military Contractors

A new covert attack campaign singled out multiple military and weapons contractor companies with spear-phishing emails to trigger a multi-stage infection process designed to deploy an unknown payload on compromised machines. The highly-targeted intrusions, dubbed STEEPMAVERICK by Securonix, also...

CVE-2022-37724

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces...

Project Wonder 跨站脚本漏洞

Project Wonder is an open source collection of reusable WebObjects frameworks, applications and extensions open sourced by the WOCommunity Association. A security vulnerability exists in Project Wonder versions 1.0 through 5.4.3 that stems from vulnerability to arbitrary HTTP header injection and...

Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5603-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5603-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

The vulnerabilities of EtherNet/IP adaptation programs (EADK), EtherNet/IP scanners (EDKS), and EtherNet/IP DLL adapters (EIPA) / EtherNet/IP DLL scanners (EIPS) stem from writing beyond the buffer boundaries in memory, allowing attackers to trigger service failures.

The vulnerabilities of EtherNet/IP adaptation programs EADK, EtherNet/IP scanners EDKS, and EtherNet/IP DLL adapters EIPA are related to writing beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to cause service failure by sending specially craft...

CVE-2021-33126

Improper access control in the firmware for some IntelR 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2022-2273)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enabl...