PT-2019-15173

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software on Catalyst 4500 Series Switches affected versions not specified Description The issue is due to incomplete error handling when processing Cisco Discovery Protocol CDP packets used with the Easy Virtual Switching System. ...

NULL pointer de-reference in Samba AD DC LDAP server

Description During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer,...

NULL pointer de-reference in Samba AD DC DNS servers

Description During the processing of an DNS zone in the DNS management DCE/RPC server, the internal DNS server or the Samba DLZ plugin for BIND9, if the DSPROPERTYZONEMASTERSERVERS property or DSPROPERTYZONESCAVENGINGSERVERS property is set, the server will follow a NULL pointer and terminate...

CVE-2018-15370

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

Input validation

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

CVE-2018-15370 Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

CVE-2018-15370 Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

CVE-2018-15370: Undefined Security Weakness

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

Cisco Catalyst 3650 and 3850 Series Switches IOS XE Software Denial of Service Vulnerability

The Cisco Catalyst 3650 and 3850 Series Switches are switch products from Cisco, Inc.IOS XE Software is a set of operating systems developed by Cisco for its network devices that run on them. A denial of service vulnerability exists in the IOS XE Software in the Cisco Catalyst 3650 and 3850 Serie...

Cisco Catalyst 3650, 3850, and 4500E Series Switchess IOS XE Software Denial of Service Vulnerability

The Cisco Catalyst 3650, 3850, and 4500E Series Switches are all different families of switch products from Cisco, Inc.IOS XE Software is a set of operating systems that Cisco has developed for its network devices that run on them. A denial of service vulnerability exists in the errdisable per VL...

Cisco Catalyst 6800 Series Switches ROM Monitor Software Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS ROM Monitor ROMMON Software for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to the presence of a...

PT-2018-2014

Name of the Vulnerable Software and Affected Versions Cisco Catalyst 6800 Series Switches affected versions not specified Description A vulnerability in the Cisco IOS ROM Monitor ROMMON Software could allow an unauthenticated, local attacker to bypass Cisco Secure Boot validation checks and load ...

Cisco Adaptive Security Appliance Path Traversal

''' Cisco Adaptive Security Appliance - Path Traversal CVE-2018-0296 A security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques. Vulnerable Products This vulnerability affects Cisco ASA...

catalyst.cinnova.com XSS vulnerability

Open Bug Bounty ID: OBB-626798 Description| Value ---|--- Affected Website:| catalyst.cinnova.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Catalyst Mahara Information Disclosure Vulnerability (CNVD-2018-11231)

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara versions 17.04 before 17.04.8, 17.10 before 17.10.5, and 18.04 before 18.04.1, which stems from a...

CVE-2018-0229

A vulnerability in the implementation of Security Assertion Markup Language SAML Single Sign-On SSO authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance ASA Software, and Cisco Firepower Threat Defense FTD Software could allow an...

Cisco Catalyst 3850 and Catalyst 3650 Series Switches IOS XE Software Denial of Service Vulnerability

The Cisco Catalyst 3850 and Catalyst 3650 Series Switches are both different families of switching devices from Cisco, Inc.IOS XE Software is a set of operating systems running on them that is specific to Cisco devices. A denial of service vulnerability exists in the IP version 4 IPv4 processing...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2018-07303)

The Cisco Catalyst 4500 Switches with Supervisor Engine 8-E is a switch product from Cisco USA.IOS XE Software is a set of operating systems that run in Cisco network devices. A resource management error vulnerability exists in the Internet Group Management Protocol IGMP packet processing feature...

Cisco Catalyst 4500 Series and 4500-X Series Switches Denial of Service Vulnerability

The Cisco Catalyst 4500 Supervisor Engine 6-E and others are switch products from Cisco. the IOS and IOS XE Software are operating systems developed for Cisco network devices that run on them. A denial of service vulnerability exists in the Bidirectional Forwarding Detection BFD offload...

CVE-2018-0177

A vulnerability in the IP Version 4 IPv4 processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads ...