CVE-2016-2222

The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...

CVE-2016-2222

The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...

CVE-2016-1399

The packet-processing microcode in Cisco IOS 15.22EA, 15.22EA1, 15.22EA2, and 15.24EA on Industrial Ethernet 4000 devices and 15.22EB and 15.22EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service packet data corruption via crafted IPv4 ICMP packets, aka Bug...

Design/Logic Flaw

The packet-processing microcode in Cisco IOS 15.22EA, 15.22EA1, 15.22EA2, and 15.24EA on Industrial Ethernet 4000 devices and 15.22EB and 15.22EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service packet data corruption via crafted IPv4 ICMP packets, aka Bug...

CVE-2016-1399

The packet-processing microcode in Cisco IOS 15.22EA, 15.22EA1, 15.22EA2, and 15.24EA on Industrial Ethernet 4000 devices and 15.22EB and 15.22EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service packet data corruption via crafted IPv4 ICMP packets, aka Bug...

CVE-2016-1399: Undefined Security Weakness

The packet-processing microcode in Cisco IOS 15.22EA, 15.22EA1, 15.22EA2, and 15.24EA on Industrial Ethernet 4000 devices and 15.22EB and 15.22EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service packet data corruption via crafted IPv4 ICMP packets, aka Bug...

PT-2016-4763

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.22EA through 15.22EA2 Cisco IOS version 15.24EA Cisco IOS versions 15.22EB through 15.22EB1 Description The issue allows remote attackers to cause a denial of service, resulting in packet data corruption, via crafted IPv4...

Cisco Industrial Ethernet 4000 and Ethernet 5000 Series Switches ICMP IPv4 Packet Corruption Vulnerability

A vulnerability in the packet processing microcode of Cisco Industrial Ethernet 4000 Series Switches and Cisco Industrial Ethernet 5000 Series Switches could allow an unauthenticated, remote attacker to corrupt packets enqueued on the device for further processing. The vulnerability is due to...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2970-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2970-1 advisory. Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. A...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2968-2)

USN-2968-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kerne...

Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-2965-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2965-3 advisory. Jann Horn discovered that the extended Berkeley Packet Filter eBPF implementation in the Linux kernel did not properly reference count file descriptors,...

Cisco IOS XE Software Network Address Translation Denial of Service Vulnerability

A vulnerability in the processing of IPv4 packets that require Network Address Translation NAT and Multiprotocol Label Switching MPLS services of Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4300 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers could allo...

Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway function of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to reload the vulnerable device. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability...

USN-2969-1: Linux kernel (Utopic HWE) vulnerabilities

Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service system crash. CVE-2015-7515 Ben Hawkes discovered that the Linux kernel's AIO...

USN-2968-2: Linux kernel (Trusty HWE) vulnerabilities

USN-2968-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kerne...

USN-2968-1: Linux kernel vulnerabilities

Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not properly validate the endpoints reported by the device. An attacker with physical access could cause a denial of service system crash. CVE-2015-7515 Ben Hawkes discovered that the Linux kernel's AIO...

Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to an improper handling of crafted, fragmented IKEv2 packets. An...

Cisco IOS Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability (cisco-sa-20160323-ios-ikev2)

A vulnerability in the Internet Key Exchange IKE version 2 v2 fragmentation code of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced...

CVE-2016-2070

The tcpcwndreduction function in net/ipv4/tcpinput.c in the Linux kernel before 4.3.5 allows remote attackers to cause a denial of service divide-by-zero error and system crash via crafted TCP traffic...

CVE-2003-1604: Undefined Security Weakness

The redirecttarget function in net/ipv4/netfilter/iptREDIRECT.c in the Linux kernel before 2.6.0 allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by sending packets to an interface that has a 0.0.0.0 IP address, a related issue to CVE-2015-8787...