CVE-2015-6393: Undefined Security Weakness

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device crash via malformed IPv4 DHCP packets to the DHCPv4 relay agent, aka Bug IDs CSCuq39250, CSCus21733,...

CVE-2016-6424: Undefined Security Weakness

The DHCP Relay implementation in Cisco Adaptive Security Appliance ASA Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service interface wedge via a crafted rate of DHCP packet transmission, aka Bug ID CSCuy66942...

Cisco NX-OS Software Crafted DHCPv4 Packet Denial of Service Vulnerability

A vulnerability in the implementation of the DHCPv4 relay agent and smart relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of crafted DHCPv4 offer...

Cisco ASA Software DHCP Relay Denial of Service Vulnerability

A vulnerability in the DHCP Relay feature of Cisco ASA Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition by causing an interface wedge. The vulnerability is due to improper handling of resources linked with the DHCP Relay feature. An attacker...

Cisco NX-OS Software Malformed DHCPv4 Packet Denial of Service Vulnerability

A vulnerability in the implementation of the DHCPv4 relay agent in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of malformed DHCPv4 packets. An attacker could...

PT-2016-6898 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.4.7.29 through 9.1.7.4 Description: A denial of service issue exists due to the improper handling of DHCP packets by the DHCP Relay feature. This can be exploited by an unauthenticated...

PT-2016-3711

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.1 through 7.3 Cisco NX-OS versions 11.0 through 11.2 Description A vulnerability in the implementation of the DHCPv4 relay agent could allow an unauthenticated, remote attacker to cause a denial of service DoS condition ...

PT-2016-3710

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.1 through 7.3 Cisco NX-OS versions 11.0 through 11.2 Description A vulnerability in the implementation of the DHCPv4 relay agent and smart relay agent could allow an unauthenticated, remote attacker to cause a denial of...

Google Chrome < 53.0.2785.89 Multiple Vulnerabilities

Binary data 9594.pasl...

Apple iOS and OS X IDS - Connectivity Component Man-in-the-Middle Attack Vulnerability

Apple iOS and OS X are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; Apple OS X is developed for Mac computers.IDS - Connectivity is one of the components used to connect to IDS. A man-in-the-middle attack vulnerability exists in the IDS - Connectivity componen...

Irssi 'buf.pl' Local Information Disclosure Vulnerability

Irssi is a text-based IRC client program written in C by Timo Sirainen and released under the GPL GNU General Public License. A local information disclosure vulnerability exists in Irssi, which can be exploited by a local attacker to obtain sensitive information...

CVE-2016-4722

The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors...

CVE-2016-4722

The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors...

CVE-2016-4722

CVE-2016-4722 affects Apple iOS prior to 10 and macOS (OS X) prior to 10.12 in the IDS - Connectivity component. The issue is a spoofing vulnerability in Call Relay handling that could enable a man-in-the-middle position to cause a denial of service. Apple’s security content notes this as a spoof...

CVE-2016-4722: Improper Input Validation

The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors...

PT-2016-6102

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple OS X versions prior to 10.12 Description The issue allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors. Recommendations For Apple...

openSUSE Security Update : Chromium (openSUSE-2016-1080)

Chromium was updated to 53.0.2785.101 to fix a number of security issues and bugs. The following vulnerabilities were fixed: boo996648 - CVE-2016-5147: Universal XSS in Blink. - CVE-2016-5148: Universal XSS in Blink. - CVE-2016-5149: Script injection in extensions. - CVE-2016-5150: Use after free...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:2296-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

chromium-browser: smb relay attack via save page as

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...

CVE-2016-5166

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and condu...