CVE-2019-1010279

Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed sequence of network packets. The component is: detect.c...

DEBIAN-CVE-2019-1010251

Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed network packet. The component is: app-layer-detect-proto.c, decode.c, decode-teredo.c an...

UBUNTU-CVE-2019-1010251

Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed network packet. The component is: app-layer-detect-proto.c, decode.c, decode-teredo.c an...

CVE-2019-1010279

Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed sequence of network packets. The component is: detect.c...

CVE-2019-1010251

Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed network packet. The component is: app-layer-detect-proto.c, decode.c, decode-teredo.c an...

The vulnerability of the microprogrammed software of SIEMENS LOGO!8 programmable logic controllers, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of SIEMENS LOGO!8 programmable logic controllers is related to improper access control. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending specially crafted packets to port 10005/TCP...

Exploit for Injection in Atlassian Jira_Server

CVE-2019-11581 Atlassian JIRA Template injection vulnerabil...

The vulnerability in the implementation of the SIP protocol of the Cisco Unified Communications Manager system arises from insufficient checking of incoming SIP traffic, allowing attackers to trigger a service failure.

The vulnerability in the implementation of the SIP protocol of the Cisco Unified Communications Manager system is related to insufficient checking of incoming SIP traffic. Exploiting this vulnerability allows a malicious actor to cause service failures by sending distorted SIP packets...

The vulnerability of the microprogrammed software in Cisco IP Phone models series 8800 and 7800, related to insufficient checking of SIP initiation packets, allows attackers to cause service failures.

The vulnerability of the microprogrammed software in Cisco IP Phone models series 8800 and 7800 is related to insufficient checking of incoming packets of the Session Initiation Protocol SIP. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2019-0785

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'...

CVE-2014-10374

On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to "permanent trackability" and "considerable privacy concerns" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low...

Rockwell Automation RSLinx Classic <= 4.00.01 Multiple Vulnerabilities (ICSA-18-263-02)

Binary data 720266.prm...

Microsoft Windows RDP BlueKeep Denial Of Service

Exploit Title: Bluekeep Denial of Service metasploit module Shodan Dork: port:3389 Date: 07/14/2019 Exploit Author: RAMELLA Sebastien https://github.com/mekhalleh/ Vendor Homepage: https://microsoft.com Version: all affected RDP services by cve-2019-0708 Tested on: Windows XP 32-bits / Windows 7...

PT-2019-11553 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libiec61850 versions 1.3.0 through 1.3.2 Description: The issue is related to a Buffer Overflow, which can cause a software crash. The component affected is the server example complex array. The attack vector involves sending a specific MMS...

Cisco TelePresence Endpoint Command Shell Injection Vulnerability

According to its self-reported version, the Cisco TelePresence Codec TC and Collaboration Endpoint CE Cisco TelePresence Software is affected by a vulnerability in the Cisco Discovery Protocol CDP implementation which could allow an unauthenticated, adjacent attacker to inject arbitrary shell...

CVE-2019-10931

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...

CVE-2019-10930

A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...

CVE-2019-0046

A vulnerability in the pfe-chassisd Chassis Manager CMLC daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A...

The vulnerability of Huawei’s S-series router microprogramming software, which stems from insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of Huawei’s S-series router microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to trigger a reboot and service failure on a vulnerable device by sending specially crafted packets...

bind: Race condition when discarding malformed packets can cause bind to exit with assertion failure

A race condition leading to denial of service was found in the way bind handled certain malformed packets. A remote attacker who could cause the bind resolver to perform queries on a server, which responds deliberately with malformed answers, could cause named to exit...