CVE-2020-3139

A vulnerability in the out of band OOB management interface IP table rule programming for Cisco Application Policy Infrastructure Controller APIC could allow an unauthenticated, remote attacker to bypass configured deny entries for specific IP ports. These IP ports would be permitted to the OOB...

250 Million Microsoft Customer Support Records Exposed Online

If you have ever contacted Microsoft for support in the past 14 years, your technical query, along with some personally identifiable information might have been compromised. Microsoft today admitted a security incident that exposed nearly 250 million "Customer Service and Support" CSS records on...

UBUNTU-CVE-2019-18282

The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash instead of siphash is used. The hashrn...

Juniper Networks Junos OS JDHCPD Command Injection Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability in Juniper Networks Junos OS Dynamic Host Configuration Protocol Daemon JDHCPD can be exploited by a remote attacker to submit a special IPv6 request that can be...

Juniper Networks Junos OS IP firewall filter access control error vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability exists in the Juniper Networks Junos OS IP firewall filter, which can be exploited by remote attackers to submit a special request that can bypass security...

QEMU: slirp: heap buffer overflow during packet reassembly

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the ipreass routine while reassembling incoming packets if the first fragment is bigger than the m-mdat buffer. An attacker could use this flaw to crash the QEMU process on the...

The vulnerability of the PF IPv6 network firewall in FreeBSD and Solaris systems allows attackers to circumvent existing access control policies or cause service interruptions.

The vulnerability of the PF IPv6 network firewall in FreeBSD and Solaris is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies or cause service failures using a specially crafted IPv6 packet...

The vulnerability of VMware Workstation and VMware Fusion, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of VMware Workstation and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted IPv6 packet...

CVE-2019-14899

creationtimestamp| type| source ---|---|--- 2019-12-05 21:38:24+00:00| seen| https://t.me/ctinow/18348 2019-12-06 12:07:14+00:00| seen| https://t.me/ctinow/18363 2019-12-09 08:19:50+00:00| seen| https://t.me/thehackernews/553 2019-12-16 13:54:00+00:00| seen|...

Unspecified Vulnerability in Unbound IPSec Module

Unbound is a DNS resolver that supports authentication recursion and caching.IPSec is one of the Internet Security Protocol modules. A security vulnerability exists in the IPSec module in Unbound versions 1.6.4 through 1.9.4, which can be exploited by an attacker to execute shell code with the he...

Linux kernel input validation error vulnerability (CNVD-2019-40470)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An input validation error vulnerability exists in the net/ipv4/sysctlnetipv4.c file in versions of Linux kernel prior to 5.0.11. The vulnerability stems from a network...

Two Former Twitter Employees Caught Spying On Users For Saudi Arabia

Two former employees of Twitter have been charged with spying on thousands of Twitter user accounts on behalf of the Saudi Arabian government, likely with the purpose of unmasking the identity of dissidents. According to an indictment filed on November 5 and unsealed just yesterday, one of the...

glibc: getaddrinfo should reject IP addresses with trailing characters

In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...

kernel: out-of-bounds array access in __xfrm_policy_unlink

A flaw was found in the Linux kernel. When xfrm policy removal occurs a system crash could occur. These policy changes generally occur through the ip command or a netlink socket...

Kernel: net: weak IP ID generation leads to remote device tracking

A flaw was found in the way the Linux kernel derived the IP ID field from a partial kernel space address returned by a nethashmix function. A remote user could observe a weak IP ID generation in this field to track Linux devices...

Honeywell equIP Series and Performance Series IP Camera Access Control Error Vulnerability

Honeywell equIP H4L2GR1 and so on are an IP camera from Honeywell USA. An access control error vulnerability exists in the Honeywell equIP Series and Performance Series IP cameras, which can be exploited by an attacker to gain unauthorized access...

CVE-2019-5535

VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7...

The vulnerability of Norton Password Manager’s password manager module, related to errors in IP packet processing, allows a hacker to replace the IP address.

The vulnerability of the Norton Password Manager password manager is related to errors in IP packet processing. Exploiting this vulnerability could allow a malicious actor to replace the IP address...

The vulnerability in the implementation of ISDN functions in the Cisco IOS XE operating system for Cisco 4000 Series Integrated Services Routers allows a attacker to transmit IPv4 traffic through an unauthenticated ISDN connection for several seconds, from the initial setup of the ISDN connection until a failure in authentication of the PPP connection occurs.

The vulnerability of the Cisco IOS XE operating system’s ISDN function implementation for Cisco 4000 Series Integrated Services Routers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to transmit IPv4 traffic through an unauthenticated...

Zcash Unspecified Vulnerability in Zcashd

Zcash is a decentralized open source data currency. zcashd is the daemon for Zcash. An unspecified vulnerability in Zcashd in versions prior to Zcash 2.0.7-3 can be exploited by an attacker to disclose the IP address of a full node with a masked IP address...