5768 matches found
CVE-2015-5434
HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...
Cisco Emergency Responder Cross-Site Scripting Vulnerability (CNVD-2015-08365)
Cisco Emergency Responder's real-time location-address tracking database and enhanced routing capabilities can transfer emergency calls directly to the appropriate Public Safety Answering Point PASP based on the caller's location. A security vulnerability exists in the Web framework of Cisco...
Multiple Huawei router information leakage vulnerability
Huawei S7700 is a product of Huawei, China.Huawei S7700, S9700, and S9300 are intelligent routing switches.Huawei AR200, AR1200, AR2200, and AR3200 are multi-service routers for enterprises. An information disclosure vulnerability exists in the CF card of multiple Huawei routers, which allows loc...
Design/Logic Flaw
Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a "VPN routing and...
CVE-2015-8087
Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R007C00SPC100 allows remote attackers to send packets to other VPNs and conduct flooding attacks via a crafted MPLS forwarding packet, aka a "VPN routing and...
wireshark: DEC DNA Routing Protocol dissector crash (wnpa-sec-2015-03)
Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial of service application crash via a crafted packet, related to the use of...
The vulnerability of the web application for data synchronization with ownCloud allows a attacker to reinstall the application or execute arbitrary code.
The vulnerability of the routing subsystem of the web application for data synchronization with ownCloud exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to reinstall the application or execute arbitra...
Oracle: Security Advisory (ELSA-2007-0347)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
smb-vuln-ms06-025 NSE Script
Detects Microsoft Windows systems with Ras RPC service vulnerable to MS06-025. MS06-025 targets the RasRpcSumbitRequest RPC method which is a part of RASRPC interface that serves as a RPC service for configuring and getting information from the Remote Access and Routing service. RASRPC can be...
Apple iOS IPv6 Routing Notification Handling Insufficiency Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS handles IPv6 route announcements without sufficient checksums, allowing local LAN attackers to exploit a vulnerability to disable IPv6 routing...
Filet-o-Firewall UPnP Security Vulnerability in Home Routers
Security vulnerabilities in UPnP continue to crop up and continue to put millions of home networking devices at risk for compromise. The latest was revealed in early August, but prompted an advisory yesterday from the DHS-sponsored CERT at the Software Engineering Institute at Carnegie Mellon...
Attack the onion routing(Tor)and anonymous service to some of the review-vulnerability warning-the black bar safety net
Tor The Onion Router, the onion router's main purpose is to prevent flow through the filter and Sniffer to spy on the user of the communication Privacy, the majority of the Chinese people familiar with it not because it's encrypted, but because it is a multi-layer node could span the Great Wall o...
BlackHat topic analysis: analysis of BGP hijacking exploit-vulnerability warning-the black bar safety net
BGP hijacking in 2 0 0 8 years defcon conference once involved, however, in 2 0 1 5 year's blackhat has been selected as the subject, visible the seriousness of the problem, frozen three feet, a cold, BGP hijacking issues to organizations around the world work together to solve it. 0×0 0 what is ...
FreeBSD Security Advisory FreeBSD-SA-15:19.routed
============================================================================= FreeBSD-SA-15:19.routed Security Advisory The FreeBSD Project Topic: routed8 remote denial of service vulnerability Category: core Module: routed Announced: 2015-08-05 Credits: Hiroki Sato Affects: All supported version...
FreeBSD routed(8) RIP query processing denial of service vulnerability
FreeBSD is a BSD-based operating system. FreeBSD routed8 has a security vulnerability that allows remote attackers to exploit the vulnerability by sending a special RIP query that triggers a security vulnerability that can crash the routed8 backend program so that the target system routing table ...
MS14-002 Windows NDProxy Privilege Escalation
/ Exploit Title: Windows NDProxy Privilege Escalation MS14-002 Date: 2015-08-03 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP SP2 x86-64 Windows 2003 SP2 x86 Windows 2003 SP2 x86-64 Windows 2003 SP2 IA-64 Supported vulnerable software: Windows XP SP3 x86...
CakePHP 2.5.9, 2.6.11 & 2.7.2 Released
CakePHP 2.5.9, 2.6.11 & 2.7.2 Released The CakePHP core team is ready to announce the immediate availability of CakePHP 2.5.9, 2.6.11, and 2.7.2. These releases contain important security updates for applications using prefix routing. Security Issues There are two issues that can impact the...
FreeBSD -- routed(8) remote denial of service vulnerability
Problem Description: The input path in routed8 will accept queries from any source and attempt to answer them. However, the output path assumes that the destination address for the response is on a directly connected network. Impact: Upon receipt of a query from a source which is not on a directl...
OracleVM 3.3 : ntp (OVMSA-2015-0102)
The remote OracleVM system is missing necessary patches to address critical security updates : - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack CVE-2015-1799 - fix generation of MD5 keys with ntp-keyge...
