PT-2018-8671

Name of the Vulnerable Software and Affected Versions: Cisco 550X Series Stackable Managed Switches affected versions not specified Description: A vulnerability in the Simple Network Management Protocol SNMP subsystem communication channel could allow an authenticated, remote attacker to cause th...

Cisco 550X Series Stackable Managed Switches SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem communication channel through the Cisco 550X Series Stackable Managed Switches could allow an authenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service DoS condition. The device n...

Heap overflow

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

UBUNTU-CVE-2018-1000116

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2018-1000116

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2018-1000116

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2018-1000116

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2018-1000116

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2018-1000116

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2018-1000116

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2018-1000116

NET-SNMP is affected by CVE-2018-1000116 (reported as memory/heap corruption in the net-snmp PDU parsing path). The issue is described as a heap corruption vulnerability triggered when parsing the PDU prior to authentication, enabling a remote attacker to crash snmpd or potentially execute arbitr...

CVE-2017-11649

Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...

PT-2018-1298

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services WAAS Software affected versions not specified Description A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature could allow an unauthenticated, remote attacker ...

CVE-2018-1000116: Out-of-bounds Write

NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution...

CVE-2017-11649

Affected product: DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594. Vulnerability: Cross-site request forgery (CSRF) that lets an attacker hijack the authentication of an unspecified user to enable SNMP via requests to goform/setSnmp. Impact (as stated): enables SNMP on the remote...

CVE-2017-11649

Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...

1.7 Tbps DDoS Attack — ​Memcached UDP Reflections Set New Record

The bar has been raised. As more amplified attacks were expected following the record-breaking 1.35 Tbps Github DDoS attack, someone has just set a new record after only four days — 1.7 Tbps DDoS attack. Network security and monitoring company Arbor Networks claims that its ATLAS global traffic a...

PT-2018-5333

Name of the Vulnerable Software and Affected Versions DrayTek Vigor AP910C version 1.2.0 RC3 build r6594 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that enable SNMP on the device. This is achieved via vectors involving the...

NetEx HyperIP Detection (SNMP)

This script performs SNMP based detection of a NetEx HyperIP virtual appliance. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...