AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

AutomationDirect P3-550E 访问控制错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. An access control error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9, which can be exploited by an attacker to cause an information disclosure by sending specially crafted network...

AutomationDirect P3-550E 安全漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A security vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker has exploited the vulnerability to cause a stack-based buffer overflow via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

PT-2024-3879 · Automationdirect · Automationdirect P3-550E

Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9 Description: Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality. Specially crafted network packets can lead to heap-based memory...

ROS-20240522-05

A vulnerability in the Hotspot component of Java SE software platforms, Oracle GraalVM Enterprise Virtual Machine Edition is related to insufficient input data validation. Exploitation of the vulnerability could allow A remote attacker to create, delete, or modify access to data Vulnerability in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing non-tunneled GSO skbs to log in the tunnel...

CVE-2023-45586

An insufficient verification of data authenticity vulnerability CWE-345 in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.13...

PT-2024-14718 · Unknown · Simplenetwork

Name of the Vulnerable Software and Affected Versions: SimpleNetwork through 29bc615 Description: The issue is caused by an off-by-one error in TCPServer.cpp, leading to a buffer overflow when trying to add '0' to the end of long msg data. This can be exploited via crafted TCP packets...

kernel: Linux kernel HSR driver: Denial of Service via uninitialized value access

A flaw was found in the High-availability Seamless Redundancy HSR driver within the Linux kernel. A local user can trigger this vulnerability by sending specific Virtual Local Area Network VLAN packets to an HSR interface. This can lead to an uninitialized value being accessed, causing a Denial o...

Unspecified Vulnerability in Palo Alto Networks PAN-OS (CNVD-2024-20504)

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS, which can be exploited by an authenticated attacker to impersonate another user and send network packets to internal assets...

CVE-2024-3388

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal...

CVE-2024-3388 PAN-OS: User Impersonation in GlobalProtect SSL VPN

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal...

CVE-2024-0218

A Denial of Service Dos vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop...

PAN-OS: User Impersonation in GlobalProtect SSL VPN

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal...

CVE-2024-0218 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1

A Denial of Service Dos vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop...

CVE-2024-0218

CVE-2024-0218 concerns Nozomi Networks Guardian. It is a DoS vulnerability in the Radius parsing functionality caused by improper input validation in certain fields, allowing an unauthenticated attacker to send malformed network packets that cause the IDS module to stop updating nodes, links, and...

CVE-2024-0218 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1

A Denial of Service Dos vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop...