GE STXPBS116 RSTi Slice PROFIBUS V1 Slave Network Interface Detection

Binary data 755563.prm...

GE STXPBS432 RSTi Slice PROFIBUS V1 Slave Network Interface Detection

Binary data 755564.prm...

GE STXPBS824 RSTi Slice PROFIBUS V1 Slave Network Interface Detection

Binary data 755566.prm...

GE STXPBS132 RSTi Slice PROFIBUS V1 Slave Network Interface Detection

Binary data 755559.prm...

GE STXMBE001 RSTi Slice Modbus TCP Slave Network Interface Detection

Binary data 755557.prm...

GE STXMBS002 RSTi Slice Modbus RS-485 Slave Network Interface Detection

Binary data 755554.prm...

Schneider Electric 140NOC77100 Modicon Quantum Ethernet/IP Network Interface Module

Binary data 751141.prm...

Schneider Electric 140NOE77111 Modicon Quantum Modbus/TCP Network Interface Module

Binary data 751146.prm...

Privilege Escalation

The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. libvirt invokes the PolicyKit pkcheck utility to handle authorization. A race...

April 25, 2019—KB4493453 (Preview of Monthly Rollup)

None None...

Moderate: Red Hat Bug Fix Advisory: containernetworking-plugins bug fix and enhancement update

An updated containernetworking-plugins package that fixes several bugs and adds various enhancements is now available for Red Hat Enterprise Linux 7 Extras. The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interface...

DHCP Server 2.5.2 - Denial of Service (PoC)

Exploit Title: DHCP Server 2.5.2 - Denial of Service PoC Discovery by: Victor Mondragón Discovery Date: 2019-04-16 Vendor Homepage: http://www.dhcpserver.de/cms/ Software Link: http://www.dhcpserver.de/cms/wp-content/plugins/download-attachments Tested Version: 2.5.2 Tested on: Windows 7 x32...

CVE-2019-4051: Exposure of Sensitive Information to an Unauthorized Actor

Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID: 156542...

March 12, 2019—KB4489878 (Monthly Rollup)

None None...

Product update: Virtuozzo 7.0 Update 9 Hotfix 1 (7.0.9-539)

The Hotfix 1 for for Virtuozzo 7.0.9 provides stability and usability bug fixes. Vulnerability id: PSBM-92228 Provided updated packages for Object Storage S3. Vulnerability id: PSBM-92227 A few unused role names were shown and could be assigned on the network interface settings screen in Virtuozz...

The vulnerability of Siemens Sinumerik programmable logic controllers lies in their exception handling errors, which allow attackers to trigger a service failure of the embedded network interface or execute arbitrary code within the context of the network interface.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to an exception handling error. Exploiting this vulnerability can allow an attacker to cause a failure in the embedded network interface controller or enable the execution of arbitrary code within the network interfa...

Cross-site Scripting (XSS)

foreman is vulnerable to cross-site scripting. A remote authenticated attacker is able to inject arbitrary web script or HTML via the network interface device identifier in the host interface form...

January 8, 2019—KB4480970 (Monthly Rollup)

None None...

Buffer overflow

An issue was discovered in several Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow ...

CVE-2018-20299

The CVE affects Bosch Smart Home cameras (360° indoor and Eyes outdoor) with firmware prior to 6.52.4. A buffer overflow in the web server’s RCP+ parser allows a remote attacker over the network to potentially achieve unauthorized code execution on the device. The vulnerability has a network atta...