LEAD Technologies LEADTOOLS Information Disclosure Vulnerability

LEAD Technologies LEADTOOLS is an image processing development kit from LEAD Technologies. An information disclosure vulnerability exists in the DICOM packet parsing function of the libltdic.so library in LEAD Technologies LEADTOOLS version 20.0.2019.3.15, which can be exploited by an attacker to...

Siemens SPPA-T3000 MS3000 Migration Server Integer Overflow Vulnerability (CNVD-2019-45425)

SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.MS3000 Migration Server is one of the migration servers. An integer overflow vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker with networ...

Siemens SPPA-T3000 Information Disclosure Vulnerability

The SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. An information disclosure vulnerability exists in the Siemens SPPA-T3000. An attacker can exploit the vulnerability to access logs and configuration files by sending careful...

Siemens SPPA-T3000 Heap Buffer Overflow Vulnerability (CNVD-2019-44775)

The SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. A heap buffer overflow vulnerability exists in the Siemens SPPA-T3000. This allows an attacker with network access to the MS3000 server to cause a denial of service conditio...

Siemens SPPA-T3000 Information Disclosure Vulnerability (CNVD-2019-44782)

The SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. An information disclosure vulnerability exists in the Siemens SPPA-T3000. An attacker with network access to the application server could access the server's directory listi...

Siemens SPPA-T3000 MS3000 Migration Server Denial of Service Vulnerability

SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.MS3000 Migration Server is one of the migration servers. A security vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker with network access ...

Siemens SPPA-T3000 MS3000 Migration Server Heap Buffer Overflow Vulnerability (CNVD-2019-45409)

SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.MS3000 Migration Server is one of the migration servers. A heap buffer overflow vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker can...

Siemens SPPA-T3000 MS3000 Migration Server Integer Overflow Vulnerability (CNVD-2019-45382)

SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.MS3000 Migration Server is one of the migration servers. An integer overflow vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker with networ...

DEBIAN-CVE-2015-1853

chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service inability to synchronize via random timestamps in crafted NTP data packets...

Shadowsocks-libev Information Disclosure Vulnerability

Shadowsocks-libev is a lightweight secure SOCKS5 agent for embedded devices. An information disclosure vulnerability exists in the network packet handling feature in Shadowsocks-libev version 3.3.2, which can be exploited by an attacker to disclose information with the help of specially crafted...

CVE-2019-5268

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories...

Cisco IOS OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco IOS is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to cause the...

Cisco IOS Software Internet Key Exchange Version 1 DoS (cisco-sa-20180328-ike-dos)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in its Internet Key Exchange Version 1 IKEv1 functionality due to improper validation of specific IKEv1 packets. An unauthenticated, remote attacker can exploit this by sending crafted IKEv1...

Cisco IOS Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)

According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Internet Key Exchange Version 2 IKEv2 module due to incorrect processing of certain IKEv2 packets. An unauthenticated, remote attacker can exploit this, by sending crafted IKEv2 packets t...

Cisco NX-OS Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF LSA type 1 packets, to...

Cisco Adaptive Security Appliance Software OSPF LSA Manipulation (cisco-sa-20170727-ospf)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. An unauthenticated, remote attacker can exploit this, by injecting crafted OSPF...

Cisco IOS XE Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Internet Key Exchange Version 2 IKEv2 module due to incorrect processing of certain IKEv2 packets. An unauthenticated, remote attacker can exploit this, by sending crafted IKE...

The vulnerability of the DIGSI 5 software and SIPROTEC 5 devices, which stems from insufficient validation of input data, allows attackers to trigger service interruptions.

The vulnerability of the DIGSI 5 software and the SIPROTEC 5 devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets to port 443/TCP...

Cisco IOS XE Software IP Detail Record DoS (cisco-sa-20160928-ipdr)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the IP Detail Record IPDR due to improper handling of IPDR packets. An unauthenticated, remote attacker can exploit this, by sending crafted IPDR packets, to cause the device to...

Cisco IOS XE Software NAT DoS (cisco-sa-20160928-esp-nat)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the implementation of Network Address Translation NAT functionality due to improper handling of malformed ICMP packets by the affected software. An unauthenticated, remote attacke...