Rockwell Automation RSLinx Classic Stack Buffer Overflow (CVE-2018-14829)

A stack buffer overflow vulnerability exists in Rockwell Automation RSLinx Classic. The vulnerability is due to incorrect handling of malformed EtherNet/IP packets. A successful exploitation of the vulnerability could lead to a system crash...

Windows TCP/IP Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have ...

CVE-2018-14827

CVE-2018-14827 affects Rockwell Automation RSLinx Classic Versions ≤ 4.00.01. A remote, unauthenticated actor can send specially crafted Ethernet/IP packets to port 44818, causing the RSLinx Classic software to stop responding and crash; recovery requires a restart. The connected documents confir...

CVE-2018-14827

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain functionali...

Debian DLA-1466-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation or denial of service. CVE-2018-5390 SegmentSmack Juha-Matti Tilli discovered that a remote attacker can trigger the worst case code paths for TCP stream reassembly with low rates of specially...

Security feature bypass

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor L4TM functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system...

CVE-2018-0353

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor L4TM functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system...

CVE-2018-0353

A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor L4TM functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system...

Race condition

A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router ASR 5700 Series devices and Virtualized Packet Core VPC System Software could allow an unauthenticated, remote attacker to cause an interface on the device to...

CVE-2018-0239

A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router ASR 5700 Series devices and Virtualized Packet Core VPC System Software could allow an unauthenticated, remote attacker to cause an interface on the device to...

CVE-2018-0228

A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause the CPU to increase upwards of 100% utilization, causing a denial of service DoS condition on an affected system. The vulnerability is due t...

CVE-2018-0170

A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition, related to the OpenDNS software. The vulnerability is due to a logic error that exists when handling a malformed incoming...

CVE-2018-0170

A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition, related to the OpenDNS software. The vulnerability is due to a logic error that exists when handling a malformed incoming...

CVE-2018-0170

A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition, related to the OpenDNS software. The vulnerability is due to a logic error that exists when handling a malformed incoming...

Cisco IOS XE Software with Cisco Umbrella Integration Denial of Service Vulnerability

A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a logic error that exists when handling a malformed incoming packet, leading to access to an...

Nmap 7.70 - Free Security Scanner: Better service and OS detection, 9 new NSE scripts, new Npcap, and much more

Nmap "Network Mapper" is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets...

CVE-2017-17901

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

Code injection

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service CPU consumption via a flood of IP packets with a TTL of 1...

CVE-2017-17901

The CVE-2017-17901 entry applies to ZyXEL P-660HW v3 devices. Affected component is the router’s IP processing TTL handling, where a flood of IP packets with TTL=1 can cause CPU exhaustion, leading to a remote denial of service. The DoS impact is explicitly stated; no patch/version information or...