CVE-2014-2201

Cisco NX-OS MTS on MDS 9000 (before 6.2(7)) and Nexus 7000 (before 6.0(2)) is vulnerable to a remote denial of service via a large volume of crafted traffic, caused by a NULL pointer dereference leading to kernel panic (CVE-2014-2201). Affected devices include NX-OS-based platforms; remediation r...

CVE-2014-0685

Cisco Nexus 1000V InterCloud 5.21IC11.2 and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted 1 IGMPv2 or 2 IGMPv3 packets, aka Bug ID CSCug61691...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

Code injection

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

Authentication flaw

Cisco Nexus 1000V InterCloud 5.21IC11.2 and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted 1 IGMPv2 or 2 IGMPv3 packets, aka Bug ID CSCug61691...

CVE-2014-0685

Cisco Nexus 1000V InterCloud 5.21IC11.2 and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted 1 IGMPv2 or 2 IGMPv3 packets, aka Bug ID CSCug61691...

CVE-2014-0685

Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware is affected by an ACL bypass vulnerability. The root cause is ACLs that do not properly handle IGMPv2/v3 traffic, allowing remote attackers to bypass deny statements by sending crafted IGMPv2 or IGMPv3 packets. Impact is remote, u...

CVE-2014-0684

Cisco NX-OS 6.2(2) on Nexus 7000 switches is affected by CVE-2014-0684. The vulnerability enables a local attacker to trigger a denial-of-service condition by supplying crafted input to the sed command, due to improper input validation (Bug CSCui56136). Impact per sources is local DoS with the po...

CVE-2014-0684

Cisco NX-OS 6.22 on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136...

Cisco Nexus 1000V Access Control List Bypass Vulnerability

A vulnerability in Cisco Nexus 1000V switches could allow an unauthenticated, remote attacker to bypass deny statements in access control lists ACLs with certain types of Internet Group Management Protocol version 2 IGMPv2 or IGMP version 3 IGMPv3 traffic. IGMP version 1 IGMPv1 is not affected. T...

Cisco Nexus 7000 Denial of Service Vulnerability

A vulnerability in Cisco Nexus 7000 Series Switches could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an error in input validation for the sed command. An attacker could exploit this vulnerability by passing...

Cisco Nexus 7000 Denial of Service Vulnerability (Cisco-SA-20140506-CVE-2014-0684)

A vulnerability in Cisco Nexus 7000 Series Switches could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2014-2034

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

Path traversal

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

CVE-2014-2034

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

CVE-2014-2034

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

CVE-2014-2034

CVE-2014-2034 affects Sonatype Nexus OSS/Pro 2.4.0–2.7.1, where an unauthenticated execution path enables attackers to create arbitrary user accounts. The vulnerability is described as a security bypass that could allow account creation without authentication. Public sources within connected data...

Backdoor found in Samsung Galaxy Devices, allows Hackers to remotely access/modify Data

Google’s Android operating system may be open source, but the version of Android that runs on most phones, tablets, and other devices includes proprietary, closed-source components. Phone makers, including Samsung ships its Smartphones with a modified version of Android, with some pre-installed...

Sonatype Nexus安全绕过漏洞

Bugtraq ID:65956 CVE ID:CVE-2014-2034 Sonatype Nexus是一款功能强大的仓库管理器。 Sonatype Nexus存在未明错误，允许远程恶意用户绕过安全限制，访问受限功能，如创建管理员账户。 0 Sonatype Nexus 2.4.0 - 2.7.1 厂商补丁： Sonatype ----- Sonatype Nexus 2.7.2已经修复该漏洞，建议用户下载更新： http://www.sonatype.org...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability (Cisco-SA-20140123-CVE-2014-0677)

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. Copyright C 2014 Greenbone Networks GmbH Some text...