2654 matches found
Input validation
A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...
CVE-2019-1873 Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability
A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software ASA and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure...
The vulnerability of the microprogrammed logic controller Modicon, related to errors in buffer boundary control in memory, allows a intruder to cause a service failure.
The vulnerability of the microprogrammed programmable logic controller Modicon is related to errors in buffer boundary control in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted Modbus packet...
CVE-2019-5016
An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory...
Memory corruption
An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory...
CVE-2019-5016
An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory...
The vulnerability of the DHCP server service for Windows Server allows a perpetrator to execute arbitrary code.
The vulnerability of the DHCP server service for Windows operating systems arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted packet...
Exim Mail Server Remote Code Execution (CVE-2019-10149)
A remote code execution vulnerability exists in Exim Mail Server. A remote attacker can exploit this issue by sending a specially crafted packet to the target server. Successful exploitation could result in execution of arbitrary code on the affected system...
bro -- Unsafe integer conversions can cause unintentional code paths to be executed
Jon Siwek of Corelight reports: The following Denial of Service vulnerabilities are addressed: Integer type mismatches in BinPAC-generated parser code and Bro analyzer code may allow for crafted packet data to cause unintentional code paths in the analysis logic to be taken due to unsafe integer...
CVE-2018-7803
A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emulator to crash when sending a specially crafted packet. The emulator is used infrequently for application logic testing. It is susceptible to an...
Design/Logic Flaw
A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emulator to crash when sending a specially crafted packet. The emulator is used infrequently for application logic testing. It is susceptible to an...
CVE-2018-4016
An exploitable code execution vulnerability exists in the URL-parsing functionality of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability...
CVE-2018-4014
An exploitable code execution vulnerability exists in Wi-Fi Command 9999 of the Roav A1 Dashcam running version RoavA1SWV1.9. A specially crafted packet can cause a stack-based buffer overflow, resulting in code execution. An attacker can send a packet to trigger this vulnerability...
Rockwell Automation Micrologix 1400 <= 21.2 Encoded Ladder Logic Read Exploit
Binary data 720226.prm...
Rockwell Automation Micrologix 1400 <= 21.2 Fault Bits Exploit
Binary data 720224.prm...
Rockwell Automation Micrologix 1400 <= 21.2 Ladder Logic Overwrite
Binary data 720216.prm...
Rockwell Automation Micrologix 1400 <= 21.2 Exploitable Access Control
Binary data 720215.prm...
Denial Of Service (DoS)
Wireshark is vulnerable to denial of service DoS attacks. Not properly determining the defragmentation state in a case of an insufficient snapshot length in fragmentaddwork function allows remote attackers to crash the application through memory consumption via a crafted packet...
Denial Of Service (DoS)
Wireshark is vulnerable to denial of service DoS attacks. Improper references to the previously processed bytes in epan/dissectors/packet-wcp.c in the WCP dissector, allows remote attackers to crash the application via a crafted packet...
Denial Of Service (DoS)
Wireshark is vulnerable to denial of service DoS attacks. Multiple memory leaks in the x11initprotocol function in epan/dissectors/packet-x11.c, allow remote attackers to crash the application via a crafted packet...