Lucene search
+L

2267 matches found

CNVD
CNVD
added 2016/09/29 12:0 a.m.7 views

Cisco IOS/IOS multicast subsystem denial of service vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS/IOS XE Software in the multicast subsystem. Exploitation of this vulnerability by an unauthenticated, remote attacker could resu...

7.8CVSS6.9AI score0.02588EPSS
SaveExploits0References1
CNVD
CNVD
added 2016/09/14 12:0 a.m.7 views

Tengen Controls Model T-920 PLC IP Segmentation Syntax Denial of Service Vulnerability

T920 is an all-in-one, industrial-grade, high-performance programmable controller from TengControl Technology. A denial of service vulnerability exists in the IP fragmentation syntax of the Tengen T-920 PLC. An attacker can test its fragmentation reorganization capability by sending a data frame...

7.1AI score
SaveExploits0
OSV
OSV
added 2016/09/01 12:59 a.m.5 views

ALPINE-CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS8.7AI score0.95707EPSS
SaveExploits7References1
OSV
OSV
added 2016/08/31 12:0 a.m.8 views

UBUNTU-CVE-2016-2183

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted...

7.5CVSS6.8AI score0.95707EPSS
SaveExploits7References25
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.11 views

The vulnerability of the microprogrammed software of the D–Link DSR–150 router allows a malicious individual to intercept network traffic.

The microprogrammed software of the D-Link DSR-150 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...

10CVSS5.5AI score0.14703EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.12 views

The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to intercept network traffic.

The D-Link DSR-500 router’s microprogramming software does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...

10CVSS5.5AI score0.14703EPSS
SaveExploits1References2Affected Software1
zdt
zdt
added 2016/07/06 12:0 a.m.25 views

Linux/x86-64 - Ncat Shellcode (SSL, MultiChannel, Persistant, Fork, IPv4/6, Password) (176 bytes)

include include // Exploit Title: Linux 64bit Ncat + SSL + MultiChannel + Persistant + Fork + IPv4/6 + Password 176byte // Date: 7/5/2016 // Exploit Author: CripSlick // Tested on: Kali 2.0 // Version: Ncat: Version 7.01 // email protected // OffSec ID: OS-20614 // http://50.112.22.183/...

7.4AI score
SaveExploits0
zdt
zdt
added 2016/07/06 12:0 a.m.31 views

Linux/x86-64 - Ncat Shellcode (SSL, MultiChannel, Persistant, Fork, IPv4/6, Password) (176 bytes)

include include // Exploit Title: Linux 64bit Ncat + SSL + MultiChannel + Persistant + Fork + IPv4/6 + Password 176byte // Date: 7/5/2016 // Exploit Author: CripSlick // Tested on: Kali 2.0 // Version: Ncat: Version 7.01 // email protected // OffSec ID: OS-20614 // http://50.112.22.183/...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.14 views

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure

A bug in the EnergyWise module of the Cisco IOS operating system, allowing a remote attacker to reboot the device using a specially crafted IP packet...

7.8CVSS5.5AI score0.03283EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.19 views

The vulnerability of the embedded software on FANUC 32i numerical control machines allows a malicious individual to disrupt the TCP/IP stack’s operation and cause malfunctions during maintenance.

The software of FANUC 32i numerical control machines contains a vulnerability that makes the software vulnerable to ICMP Flood attacks. Exploiting this vulnerability allows a malicious individual to disrupt the TCP/IP stack and cause service failures...

5CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.8 views

The vulnerability of the embedded software on FANUC 32i numerical control machines allows a malicious individual to disrupt the TCP/IP stack’s operation and cause malfunctions during maintenance.

The software of FANUC 32i numerical control machines contains a vulnerability that makes the software vulnerable to “Smurf” attacks. Exploiting this vulnerability allows a malicious individual to disrupt the TCP/IP stack by sending specially crafted ICMP packets, thereby causing system failures...

5CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.12 views

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure

Improper processing of IPv6 sockets using the UDPCORK option in the udpv6pushpendingframes function can lead to service failures...

4.7CVSS6.7AI score0.0042EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.17 views

The vulnerability of the embedded software on FANUC 32i numerical control machines allows a hacker to cause malfunctions during maintenance operations.

The software of FANUC 32i numerical control machines contains a vulnerability that makes the software vulnerable to “IP-Flud” type attacks. Exploiting this vulnerability could allow a malicious actor to disrupt the TCP/IP stack and cause service failures...

5.3CVSS6.6AI score0.80286EPSS
SaveExploits10References22Affected Software5
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.12 views

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the NAT service, which allows a remote attacker to cause a router to generate a “service failure” by manipulating IP and SIP packets...

7.8CVSS5.5AI score0.01799EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.14 views

The vulnerability of the Windows operating system, which allows a malicious individual to trigger a service failure

The vulnerability in the implementation of the IPv6 TCP/IP protocol in Windows allows a malicious actor to trigger a failure of the vulnerable system using an ICMPv6 packet...

7.8CVSS5.5AI score0.32685EPSS
SaveExploits1References3
CNVD
CNVD
added 2016/06/13 12:0 a.m.9 views

OpenStack Neutron ICMPv6 Source Address Spoofing Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace, Inc. in the U.S. Neutron is one of the networking components that provides Network-as-a-Service NaaS, which enables the creating networks between...

9.1CVSS6.8AI score0.04248EPSS
SaveExploits1References1
OSV
OSV
added 2016/06/03 2:1 a.m.8 views

CVE-2016-1370

Cisco Prime Network Analysis Module NAM before 6.21-b miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service mond process crash and monitoring outage via crafted IPv6 packets, aka Bug ID CSCuy37324...

5.3CVSS5.8AI score0.02057EPSS
SaveExploits0References2
CNVD
CNVD
added 2016/06/03 12:0 a.m.4 views

Cisco Prime Network Analysis Module Remote Code Execution Vulnerability (CNVD-2016-03816)

The Cisco Prime Network Analysis Module is a network analysis module that is part of the overall Cisco Prime solution. A remote code execution vulnerability exists in the IPv6 packet decoding feature of Cisco NAM. The vulnerability stems from not properly calculating the IPv6 packet load length. ...

5.3CVSS8AI score0.02057EPSS
SaveExploits0References1
OSV
OSV
added 2016/05/22 1:59 a.m.5 views

DEBIAN-CVE-2016-2222

The wphttpvalidateurl function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct server-side request forgery SSRF attacks via a zero value in the first octet of an IPv4 address in the u parameter to wp-admin/press-this.php...

8.6CVSS7AI score0.07872EPSS
SaveExploits1References1
CNVD
CNVD
added 2016/05/17 12:0 a.m.6 views

Cisco Industrial Ethernet 4000 and Ethernet 5000 IOS Denial of Service Vulnerability

Cisco IOS on Industrial Ethernet IE 4000 and Industrial Ethernet IE 5000 are a set of operating systems from Cisco that run in the Cisco IE 4000 and 5000 series switch products. A security vulnerability exists in the packet-processing microcode in the Cisco IOS on the Cisco IE 4000 and IE 5000. A...

7.5CVSS6.8AI score0.02471EPSS
SaveExploits0References1
Rows per page
Query Builder