7006 matches found
PT-2019-3811 · Cisco · Cisco Unified Communications Manager Session Management Edition +1
Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME affected versions not specified Description: A vulnerability in the web-based interface could allow an unauthenticated, remote attack...
Cisco Unified Communications Manager CVE-2019-12710 SQL Injection Vulnerability
Description Cisco Unified Communications Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit...
Multiple Cisco Unified Communications Products Cross Site Request Forgery Vulnerability
Description Multiple Cisco Unified Communications Products are prone to a cross-site request-forgery vulnerability because the application does not properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the...
PT-2019-3810 · Cisco · Cisco Unified Communications Manager Session Management Edition +1
Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition affected versions not specified Description: A vulnerability in the web-based interface could allow an unauthenticated, remote attacker t...
Cisco Small Business 220 Series - Multiple Vulnerabilities
!/usr/bin/python2.7 """ Subject Realtek Managed Switch Controller RTL83xx PoC 2019 bashis https://www.realtek.com/en/products/communications-network-ics/category/managed-switch-controller Brief description 1. Boa/Hydra suffer of exploitable stack overflow with a 'one byte read-write loop' w/o...
Realtek Managed Switch Controller (RTL83xx) Stack Overflow
!/usr/bin/python2.7 """ Subject Realtek Managed Switch Controller RTL83xx PoC 2019 bashis https://www.realtek.com/en/products/communications-network-ics/category/managed-switch-controller Brief description 1.Boa/Hydra suffer of exploitable stack overflow with a 'one byte read-write loop' w/o...
The vulnerability of the WrappedI420Buffer function in the WebRTC component of the Firefox ESR browser allows a attacker to trigger a service failure.
The vulnerability of the WrappedI420Buffer function in the Firefox ESR WebRTC component is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Machine-In-The-Middle
Overview Versions of https-proxy-agent prior to 2.2.3 are vulnerable to Machine-In-The-Middle. The package fails to enforce TLS on the socket if the proxy server responds the to the request with a HTTP status different than 200. This allows an attacker with access to the proxy server to intercept...
[SECURITY] Fedora 29 Update: compat-openssl10-1.0.2o-7.fc29
The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1...
Fedora Update for compat-openssl10 FEDORA-2019-00c25b9379
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Russians Hack FBI Comms System
Yahoo News reported that the Russians have successfully targeted an FBI communications system: American officials discovered that the Russians had dramatically improved their ability to decrypt certain types of secure communications and had successfully tracked devices used by elite FBI...
[SECURITY] Fedora 31 Update: compat-openssl10-1.0.2o-8.fc31
The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1...
Design/Logic Flaw
hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...
CVE-2019-16275
hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...
CVE-2019-16275
hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations because source address validation is mishandled. This is a denial of service that should have been prevented by PMF aka management frame protection. The attacker must send a...
Rockwell Automation 1783-WAPBK9 Stratix 5100 Communications Adapter
Binary data 765016.prm...
Rockwell Automation 1783-WAPCK9 Stratix 5100 Communications Adapter
Binary data 765017.prm...
Rockwell Automation 1783-WAPAK9 Stratix 5100 Communications Adapter
Binary data 765015.prm...