CVE-2017-12245: Missing Release of Resource after Effective Lifetime

A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause depletion of system memory, aka a Firepower Detection Engine SSL Decryption Memory Consumption Denial of Service vulnerability. If this memory leak...

Cisco Firepower Detection Engine SSL Decryption Memory Consumption Denial of Service Vulnerability

A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause depletion of system memory. If this memory leak persists over time, a denial of service DoS condition could develop because traffic can cease to be...

Cisco Firepower Detection Engine SSL Multiple DoS (cisco-sa-20170405-cfpw) (cisco-sa-20170405-cfpw1)

According to its version, the Cisco Firepower Threat Defense FTD software installed on the remote device is prior to 6.1.0.2 or else is 6.2.x prior to 6.2.0.1. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the detection engine reassembly of...

Cisco Firepower System Software SSL Logging DoS (cisco-sa-20170517-fpwr)

According to its version, the Cisco Firepower Threat Defense FTD software installed on the remote host is prior to 6.1.0.3 or else is 6.2.x prior to 6.2.1. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the logging configuration of Secure...

CVE-2017-3793

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software 8.0 through 8.7 and 9.0 through 9.6 and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all...

Race condition

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software 8.0 through 8.7 and 9.0 through 9.6 and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all...

CVE-2017-3793

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software 8.0 through 8.7 and 9.0 through 9.6 and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all...

CVE-2017-3793

The CVE-2017-3793 issue affects Cisco ASA Software (8.0–8.7) and Cisco FTD Software (9.0–9.6), caused by improper limitation of the global out-of-order TCP queue for specific block sizes. An unauthenticated, remote attacker can send many unique permitted TCP connections with out-of-order segments...

Cisco ASA Software and Cisco FTD Software TCP Normalizer Denial of Service Vulnerability

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all interfaces, resulting in a denial of servi...

CVE-2011-2957

Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 CPR9 SR3 allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer .ftd configuration file, which triggers memory corruption...

CVE-2011-2957: Undefined Security Weakness

Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 CPR9 SR3 allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer .ftd configuration file, which triggers memory corruption...

PT-2011-4207

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk Diagnostics Viewer versions prior to V2.30.00 CPR9 SR3 Description The issue allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer .ftd configuration file, which triggers memo...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

CVE-2006-4105 concerns a Cross-site Scripting (XSS) vulnerability in Fill Threads Database (FTD) version 3.7.3. The issue allows remote attackers to inject arbitrary web script or HTML through two vectors: the search field and an e-mail message. The provided documents confirm the affected product...

XSS Vulnerability in FTD v3.7.3

There are some XSS Vulnerabilities in FTD v3.7.3 and prior. XSS attacks HTML / Javascript codes will launch if they are submitted as a search in the search bar. They will also be launched when sent as a mail to yourself or a victim. Proof of Concept: To make sure it launches, you just need to add...