CVE-2018-0470

A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the affected software improperly parsing malformed...

Buffer overflow

A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the affected software improperly parsing malformed...

CVE-2018-0470 Cisco IOS XE Software HTTP Denial of Service Vulnerability

A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the affected software improperly parsing malformed...

CVE-2018-0470: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service DoS condition. The vulnerability is due to the affected software improperly parsing malformed...

PT-2018-5367 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A cross-site request forgery issue exists in the web server functionality, allowing an attacker to create malicious HTML that can trigger this issue when a specially crafted HTTP packet is...

PT-2017-12581

Name of the Vulnerable Software and Affected Versions Brother DCP-J132W and probably other DCP models version 1.20 Description A Denial of Service issue allows remote attackers to disrupt the network connection of the printer by sending a large amount of HTTP packets, causing it to hang...

Code injection

Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service CPU consumption via a large number of crafted HTTP packets...

CVE-2016-5822

Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service CPU consumption via a large number of crafted HTTP packets...

CVE-2016-5822: Undefined Security Weakness

Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service CPU consumption via a large number of crafted HTTP packets...

CVE-2016-6439

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper...

Input validation

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper...

PT-2016-7572

Name of the Vulnerable Software and Affected Versions Huawei USG5500 versions V300R001C00 Huawei USG products affected versions not specified Description The issue allows attackers to bypass the anti-DDoS module of the USGs, potentially causing a denial of service condition on the backend server ...

Session fixation

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

CVE-2015-0712

Cisco StarOS for ASR 5000 Series (12.0, 12.2(300), 14.0, 14.0(600)) uses a vulnerable session-manager service that can be remotely triggered to reload, causing DoS via malformed HTTP packets (Bug CSCud14217). Affected devices process HTTP at the session-manager, and the issue’s exploitation leads...

CVE-2015-0712

The session-manager service in Cisco StarOS 12.0, 12.2300, 14.0, and 14.0600 on ASR 5000 devices allows remote attackers to cause a denial of service service reload and packet loss via malformed HTTP packets, aka Bug ID CSCud14217...

PT-2015-4833

Name of the Vulnerable Software and Affected Versions Cisco StarOS versions 12.0, 12.2300, 14.0, 14.0600 Description The issue allows remote attackers to cause a denial of service, resulting in service reload and packet loss, via malformed HTTP packets. Recommendations For Cisco StarOS version...

Cisco ASA Software SSL VPN Memory Blocks Exhaustion Vulnerability

A vulnerability in the SSL VPN feature of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the exhaustion of available memory, which could lead to system instability and availability issues on the SSL VPN services. The vulnerability is due to improper implementation of...

CVE-2014-2590

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service interface outage via crafted HTTP packets...

CVE-2014-2590: Missing Authentication for Critical Function

The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service interface outage via crafted HTTP packets...

PT-2014-4799

Name of the Vulnerable Software and Affected Versions Siemens RuggedCom ROS versions prior to 3.11 Siemens RuggedCom ROS version 3.11 prior to 3.11.5 for RS950G Siemens RuggedCom ROS version 3.12 Siemens RuggedCom ROS version 4.0 for RSG2488 Description The issue allows remote attackers to cause ...