CVE-2018-0122

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite system files that are stored in the flash memory of an affected system. The vulnerability is due to insufficient...

CVE-2018-0132

Cisco IOS XR Software is affected by CVE-2018-0132 due to a flaw in the FIB code where extremely long routing updates can cause inconsistency between the FIB and RIB. This unauthenticated, remote-triggered condition could lead to a DoS. The root cause is incorrect processing of large routing upda...

CVE-2018-0134

The CVE-2018-0134 issue affects Cisco Policy Suite’s RADIUS authentication module, where an unauthenticated, remote attacker can deduce whether a subscriber username is valid by observing distinct authentication failure messages. This information disclosure vulnerability originates from the RADIU...

CVE-2018-0135

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software improperly validates user-supplied search input. An attacker could exploit this...

CVE-2018-0135

CVE-2018-0135 describes an information-disclosure vulnerability in Cisco Unified Communications Manager (CUCM). The issue arises because the affected software improperly validates user-supplied search input, allowing an authenticated, remote attacker to send malicious requests and potentially ret...

CVE-2018-0127

A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information...

CVE-2018-0138

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an affected device via the BitTorrent protocol. The vulnerability exists because the affected softwa...

CVE-2018-0129

CVE-2018-0129 is a reflected cross-site scripting (XSS) vulnerability in Cisco Data Center Analytics Framework (DCAF) web-based management interface. Unauthenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution in the user’s browser context or ...

CVE-2018-0119

CVE-2018-0119 describes an information-disclosure flaw in Cisco Spark’s account-service authentication controls. The issue stems from the improper display of user-account tokens, which could let an authenticated remote attacker log in with a token from another account and interact with or view re...

Design/Logic Flaw

Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web...

CVE-2018-6794

Suricata before 4.0.4 is vulnerable to an HTTP detection bypass (CVE-2018-6794) in detect.c and stream-tcp.c. A server can inject data before the TCP 3‑way handshake completes; web clients may accept the data, but Suricata’s HTTP/tailored stream checks can skip it, primarily affecting HTTP signat...

CVE-2018-6794

Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web...

Security Advisory - Two Out-of-Bounds Read Vulnerabilities in Some Huawei Products

Some Huawei products have two out-of-bounds read vulnerabilities due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the devi...

UBUNTU-CVE-2014-5282

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...

CVE-2014-5282

Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'...

PT-2018-4263

Name of the Vulnerable Software and Affected Versions Docker versions prior to 1.3 Description The issue arises from improper validation of image IDs, allowing remote attackers to redirect to another image by loading untrusted images via 'docker load'. Recommendations For Docker versions prior to...

CVE-2018-0136

CVE-2018-0136 affects Cisco IOS XR Software Release 5.3.4 on ASR 9000 Series with Trident-based line cards configured for IPv6. The issue is a DoS caused by improper handling of IPv6 packets with a fragment header extension, allowing an unauthenticated remote attacker to trigger a reload of one o...

Double free

A vulnerability in the Secure Sockets Layer SSL VPN functionality of the Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a...

CVE-2018-0101

A memory management vulnerability in the XML parser of Cisco Adaptive Security Appliance (ASA) Software allows unauthenticated, remote attackers to execute arbitrary code or cause a system reload. The root cause is an attempt to double free a region of memory when processing a malicious XML paylo...

Security Advisory - Two Vulnerabilities in MGCP Protocol of Some Huawei Products

There is an out-of-bounds read vulnerability in Media Gateway Control Protocol MGCP of some Huawei products. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may cause...