48 matches found
CVE-2020-7574: Improper Neutralization of Input During Web Page Generation
A vulnerability has been identified in Climatix POL908 BACnet/IP module All versions, Climatix POL909 AWM module All versions V11.32. A persistent cross-site scripting XSS vulnerability exists in the "Server Config" web interface of the affected devices that could allow an attacker to inject...
Denial Of Service (DoS)
kernel is vulnerable to denial of service attack.It occur if packets were received while the ipip or ipgre module was being loaded...
Schneider Electric Modicon Quantum 140NWM10000 Ethernet network TCP/IP module
Binary data 764536.prm...
Race condition
Race condition in the IP module in the kernel in Sun OpenSolaris snv106 through snv124 allows remote attackers to cause a denial of service NULL pointer dereference and panic via unspecified vectors related to the 1 tcpdogetsockname or 2 tcpdogetpeername function...
CVE-2009-4226: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the IP module in the kernel in Sun OpenSolaris snv106 through snv124 allows remote attackers to cause a denial of service NULL pointer dereference and panic via unspecified vectors related to the 1 tcpdogetsockname or 2 tcpdogetpeername function...
CVE-2009-3519
CVE-2009-3519 affects the kernel IP module in Sun Solaris 8–10 and OpenSolaris up to snv_109. The issue is multiple memory leaks in STREAMS handling (vectors M_DATA, M_PROTO, M_PCPROTO, M_SIG) that allow local users to cause a denial of service via memory consumption. The description does not spe...
CVE-2009-3519: Missing Release of Resource after Effective Lifetime
Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv109, allow local users to cause a denial of service memory consumption via vectors related to 1 MDATA, 2 MPROTO, 3 MPCPROTO, and 4 MSIG STREAMS messages...
CVE-2006-1242
The ippushpendingframes function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan nmap -sI attack, which bypasses intended protections against such attacks...