Lucene search
+L

2654 matches found

Veracode
Veracode
added 2019/05/02 5:29 a.m.32 views

Denial Of Service (DoS)

ntp is vulnerable to denial of service. An off-by-one flaw, leading to a buffer overflow, was found in cookedprint functionality of ntpq. A specially crafted NTP packet could potentially cause ntpq to crash...

5.9CVSS7.3AI score0.12282EPSS
SaveExploits0References14Affected Software1
Cisco
Cisco
added 2019/05/01 4:00 p.m.67 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Lightweight Directory Access Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial ...

6.8CVSS7.2AI score0.02028EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/05/01 4:00 p.m.68 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

6.8CVSS6.7AI score0.029EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2019/04/28 12:00 a.m.6 views

TP-Link SR20 Arbitrary Code Execution

An arbitrary code execution vulnerability exists in TP-Link SR20 smart hub. An unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

4.1AI score
SaveExploits0
Prion
Prion
added 2019/04/20 1:29 p.m.14 views

Stack overflow

An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this...

7.5CVSS9.5AI score0.04288EPSS
SaveExploits1References7Affected Software1
UbuntuCve
UbuntuCve
added 2019/04/20 1:29 p.m.32 views

CVE-2019-11365

An issue was discovered in atftpd in atftp 0.7.1. A remote attacker may send a crafted packet triggering a stack-based buffer overflow due to an insecurely implemented strncpy call. The vulnerability is triggered by sending an error packet of 3 bytes or fewer. There are multiple instances of this...

9.8CVSS7.6AI score0.04288EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.11 views

The vulnerability of RPCAP dissectors (epan/dissectors/packet-rpcap.c) in the Wireshark network traffic analyzer allows a hacker to induce a service failure.

The vulnerability of the RPCAP dissector epan/dissectors/packet-rpcap.c in the Wireshark network traffic analyzer is related to the assignment of the null pointer. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially crafted packet or packet trace...

7.5CVSS6.6AI score0.03735EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:00 a.m.9 views

The vulnerability of the Wireshark traffic analyzer program, related to reading data beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer program relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted package...

5.5CVSS6.6AI score0.0144EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2019/03/06 10:29 p.m.9 views

CVE-2019-1595

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface...

6.5CVSS6.8AI score0.00646EPSS
SaveExploits0References2
Cisco
Cisco
added 2019/03/06 4:00 p.m.90 views

Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface...

7.4CVSS2.1AI score0.00646EPSS
SaveExploits0References1
OSV
OSV
added 2019/03/05 8:29 p.m.10 views

CVE-2019-6559

Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash...

6.5CVSS6.7AI score0.02424EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:00 a.m.17 views

The vulnerability of the SMBv2 component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SMBv2 component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by sending a specially crafted package to the SMBv2 server...

8.5CVSS8.2AI score0.17386EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
added 2019/02/24 12:00 a.m.45 views

NTPsec ntpd ctl_getitem Out of Bounds Read (CVE-2019-6443)

An out of bounds read vulnerability has been reported in NTPsec ntpd. The vulnerability is due to insufficient validation of the length of a message in a NTP packet. A remote unauthenticated user can exploit this vulnerability by sending a crafted packet to the target server...

6.4CVSS2.3AI score0.66881EPSS
SaveExploits5
RedHat Linux
RedHat Linux
added 2019/02/20 2:11 p.m.11 views

haproxy: Infinite recursion via crafted packet allows stack exhaustion and denial of service

An issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer, a crafted packet can trigger infinite recursion by making the pointer point to itself, or create a long chain of valid pointers resulting in stack exhaustion...

7.5CVSS6.6AI score0.06593EPSS
SaveExploits0References5
Check Point Advisories
Check Point Advisories
added 2019/01/28 12:00 a.m.51 views

Rockwell Automation RNADiagReceiver Denial Of Service (CVE-2012-0222)

A denial of service vulnerability exists in Rockwell Automation RNADiagReceiver. A remote attacker could exploit this vulnerability by sending a specially crafted packet to the target system...

5CVSS6.1AI score0.03534EPSS
SaveExploits0
OSV
OSV
added 2019/01/15 9:29 p.m.12 views

CVE-2019-0011

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface such as fxp0, me0, em0, vme0 destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service...

6.5CVSS5.8AI score0.00637EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/15 9:29 p.m.12 views

CVE-2019-0006

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...

9.8CVSS6.1AI score0.05263EPSS
SaveExploits0References2
Veracode
Veracode
added 2019/01/15 9:15 a.m.32 views

Denial Of Service (DoS)

qemu-kvm is vulnerable to denial of service DoS attacks. The vulnerability exists as the netchecksumcalculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service out-of-bounds heap read and crash via the payload length in a crafted packet...

8.4CVSS7.4AI score0.00564EPSS
SaveExploits0References31Affected Software2
Veracode
Veracode
added 2019/01/15 9:09 a.m.32 views

Validation Bypass

ntp is vulnerable to validation bypass. It was discovered that ntpd as a client did not correctly check the originate timestamp in received packets. A remote attacker could use this flaw to send a crafted packet to an ntpd client that would effectively disable synchronization with the server, or...

5.3CVSS6.4AI score0.06255EPSS
SaveExploits2References34Affected Software1
Veracode
Veracode
added 2019/01/15 9:02 a.m.27 views

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS attacks. The vulnerability exists as an use-after-free issue in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership...

5CVSS5.7AI score0.02908EPSS
SaveExploits0References15Affected Software1
Rows per page
Query Builder