CVE-2017-3807

A vulnerability in Common Internet Filesystem CIFS code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated, remote attacker to cause a heap overflow. The vulnerability is due to insufficient validation of user supplied input. An...

Cisco ASA Clientless SSL VPN CIFS Heap Overflow Vulnerability (cisco-sa-20170208-asa)

A vulnerability in Common Internet Filesystem CIFS code in the Clientless SSL VPN functionality of Cisco ASA Software could allow an authenticated, remote attacker to cause a heap overflow. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced source...

CVE-2017-3824

A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition. Cisco cBR-8 Converged Broadband Routers running vulnerable versions of Cis...

CVE-2017-3790

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

Cisco cBR Series Converged Broadband Routers List Headers Denial of Service Vulnerability

A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service DoS condition. The vulnerability is due to memory corruption. An attacker could exploit...

Design/Logic Flaw

A vulnerability in Intermediate System-to-Intermediate System IS-IS protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because o...

CVE-2017-3804

A vulnerability in Intermediate System-to-Intermediate System IS-IS protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because o...

Design/Logic Flaw

An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload. More Information: CSCuy06917 CSCuy45036 CSCuy59525. Known Affected Releases: 20.0.0 20.0.M0.62842 20.0....

CVE-2017-3804

Cisco Nexus 5000, 6000, and 7000 Series switches running NX-OS are affected by CVE-2017-3804 due to IS-IS packet processing. A crafted IS-IS packet could be received by an adjacent attacker, causing the device to reload and, in FabricPath domains, crash via a hap reset in the __inst_001__isis_fab...

CVE-2017-3804

A vulnerability in Intermediate System-to-Intermediate System IS-IS protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because o...

Multiple Cisco Nexus Device Denial of Service Vulnerabilities

The Cisco Nexus 7000 Series switches help create the network infrastructure platform needed for next-generation unified array data centers. A denial of service vulnerability exists in multiple Cisco Nexus devices. An attacker could exploit this vulnerability to reload the affected devices,...

PIMS order management system step2.php has a reload vulnerability

PIMS is an online order management system for subscription-based websites. A reinstallation vulnerability exists in step2.php of the PIMS order management system. Since the program does not validate the installation, an attacker can use the vulnerability to reinstall the system and directly...

CVE-2016-9211

A vulnerability in TCP port management in Cisco ONS 15454 Series Multiservice Provisioning Platforms could allow an unauthenticated, remote attacker to cause the controller card to unexpectedly reload. More Information: CSCuw26032. Known Affected Releases: 10.51...

CVE-2016-9203

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

CVE-2016-6467

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit NPU process. More Information: CSCva84552. Known Affected Releases...

CVE-2016-6467

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router ASR 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit NPU process. More Information: CSCva84552. Known Affected Releases...

Information disclosure

A vulnerability in TCP port management in Cisco ONS 15454 Series Multiservice Provisioning Platforms could allow an unauthenticated, remote attacker to cause the controller card to unexpectedly reload. More Information: CSCuw26032. Known Affected Releases: 10.51...

Propana Reload - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Propana Reload published at the 'play' market has multiple vulnerabilities...

Cisco NX-OS DHCPv4 Crafted Packet DoS (cisco-sa-20161005-dhcp2)

According to its version and configuration, the Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the DHCPv4 relay agent due to improper validation of DHCPv4 packets. An unauthenticated, remote attacker can exploit this, via a specially crafted...

Intentionally Vulnerable Machine for Exploit Testing: Metasploitable3

Intentionally Vulnerable Machine for Exploit Testing Metasploitable3 is a free virtual machine that allows you to simulate attacks largely using Metasploit. It has been used by people in the security industry for a variety of reasons: such as training for network exploitation, exploit development...