CVE-2014-3125

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

CVE-2014-3125

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

CVE-2014-3125

CVE-2014-3125 concerns Xen 4.4.x on ARM where CNTKCTL_EL1 register is not properly context switched. This allows a local guest to modify hardware timers and, per the XSA-91 advisory, may enable a guest kernel to reconfigure timer interrupts for the entire system, potentially causing a denial of s...

Security Advisory-Improper Input Validation Vulnerability on Multiple Quidway Switch Products

Reported by the internal R&D engineers, several switch products does not validate the input properly. This vulnerability enables attacker to launch DoS attack by crafting and sending malformed packet to these vulnerable products Vulnerability ID: HWPSIRT-2014-0301. This Vulnerability has been...

Cisco 7600 Series Route Switch Processor 720 with 10 Gigabit Ethernet Uplinks Denial of Service (cisco-sa-20140326-RSP72010GE)

A vulnerability exists in Cisco 7600 Series Route Switch Processor 720 with 10 Gigabit Ethernet Uplinks that could allow a remote, unauthenticated attacker to cause the route processor to reboot or stop forwarding traffic, resulting in a denial of service condition. This vulnerability affects...

CVE-2014-2107

Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...

Code injection

Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...

CVE-2014-2107

Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...

PT-2014-1317

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.3 Description The issue allows remote attackers to cause a denial of service, specifically a route switch processor outage, via crafted IP packets. This is due to an issue in the Kailash...

3Com Switch Default Admin Credentials

The remote device is a 3Com Switch that uses a set of known, default credentials. Knowing these, an attacker able to connect to the service can gain control of the device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SEC Consult SA-20140228-0 :: Privilege escalation vulnerability in MICROSENS Profi Line Modular Industrial Switch

SEC Consult Vulnerability Lab Security Advisory 20140228-0 ======================================================================= title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1...

MICROSENS Profi Line Switch 10.3.1 - Privilege Escalation

MICROSENS Profi Line Modular Industrial Switch Web Manager version 10.3.1 suffers from a privilege escalation vulnerability. title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1 fixed...

MICROSENS Profi Line Switch 10.3.1 - Privilege Escalation

MICROSENS Profi Line Switch 10.3.1 - Privilege Escalation SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119P...

MICROSENS PLMISWM 10.3.1 Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1 fixed versio...

MICROSENS Profi Line Switch 10.3.1 - Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege escalation vulnerability product: MICROSENS Profi Line Modular Industrial Switch Web Manager MS652119PM vulnerable version: Firmware version 10.3.1 fixed versio...

Updated kernel-vserver packages fix security vulnerability

This kernel update provides an update to the 3.10 longterm branch, currently 3.10.28 and fixes the following security issues: The ath9khtcsetbssidmask function in drivers/net/wireless/ath/ath9k/htcdrvmain.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC...

Emerson Network Power Avocent MergePoint Unity KVM Switch Detection

Binary data emersonmpukvmdetect.nbin...

Emerson Network Power Avocent MergePoint Unity KVM Switch < 1.14 / 1.18 download.php filename Parameter Directory Traversal

The remote host is an Emerson Network Power Avocent MergePoint Unity KVM Switch with a firmware version prior to 1.14 or 1.18. It is, therefore, affected by a directory traversal vulnerability due to a failure to sanitize user-supplied input to the 'filename' parameter of the 'download.php' scrip...

CVE-2013-6030

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

Directory traversal

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...