Buffer Over-read

libzephyr.so is vulnerable to Buffer Over-read. The vulnerability is due to a flaw in the handling of malformed GATT packets by the BLE victim device when communicating with a malicious BLE device. This flaw allows the malicious BLE device to crash the victim device...

PT-2024-2453

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS x86 versions 6.40.5 through 6.49.10 Description An issue in the processing of input data allows a remote attacker to cause a denial of service, resulting in a device crash. This is achieved by sending crafted packet data to t...

zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.6 and earlier versions, which stems from a vulnerability that allows an attacker to crash a BLE device by sending a malformed gatt packet...

The vulnerability of IP packet processors in microsoftware for Cisco Aironet Access Points and the microsoftware for Cisco Wireless LAN Controllers (WLC) allows a attacker to cause service interruptions.

The vulnerability of IP packet processors in microsoftware for Cisco Aironet Access Points and the microsoftware for Cisco Wireless LAN Controllers WLC is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sendin...

CVE-2024-20308

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properl...

CVE-2024-20308

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properl...

CVE-2024-20307

CVE-2024-20307 : Cisco IOS and IOS XE Software are affected by a vulnerability in the IKEv1 fragmentation code that can allow an unauthenticated, remote attacker to cause a heap overflow and reboot the device (DoS). The issue arises because crafted fragmented IKEv1 packets are not properly reasse...

CVE-2024-20307

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properly...

CVE-2024-20308

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properl...

CVE-2024-20314

A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service DoS condition on an affected device. This...

CVE-2024-20314

A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service DoS condition on an affected device. This...

CVE-2024-20271

A vulnerability in the IP packet processing of Cisco Access Point AP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could...

CVE-2024-20271

A vulnerability in the IP packet processing of Cisco Access Point AP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could...

CVE-2024-20271

A vulnerability in the IP packet processing of Cisco Access Point AP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient input validation of certain IPv4 packets. An attacker could...

CVE-2024-20314

A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service DoS condition on an affected device. This...

PT-2024-2579 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and Cisco IOS XE affected versions not specified Description: The issue is related to the incorrect handling of LISP packets, which could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in ...

wolfSSL Array Index Validation Error Vulnerability

wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. An array index validation error vulnerability exists in wolfSSL version 5.6.3, which stems from failure to properly handle incoming error messages, and ca...

Cisco IOS XE Software SD Access Fabric Edge Node DoS (cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop al...

PT-2024-2417 · Cisco · Cisco Aironet Access Points +2

Name of the Vulnerable Software and Affected Versions: Cisco Access Point AP Software affected versions not specified Cisco Aironet Access Points AP affected versions not specified Cisco Wireless LAN Controller WLC affected versions not specified Description: A vulnerability in the IP packet...

VSeeFace 安全漏洞

VSeeFace is a free, highly configurable face and hand tracking 3D avatar puppet maker from VSeeFace. A security vulnerability exists in VSeeFace 1.13.38.c2 and prior versions, which stems from a vulnerability that allows an attacker to cause a denial of service via spoofed UDP packets...