26 matches found
Cisco Firepower Management Center Incomplete Rule Set Vulnerability
A vulnerability in the Policy deployment module of the Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...
Cisco Firepower Management Center Incomplete Rule Set Vulnerability
A vulnerability in the Policy deployment module of the Cisco Firepower Management Center FMC could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base. The vulnerability is due to a lack of condition checks in the rules engine. An attacker could...
VulnCheck KEV: CVE-2016-6415
Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 IKEv1 security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 IKEv1 that could allow an...
Cisco IKEv1 Information Disclosure (BENIGNCERTAIN; CVE-2016-6415)
A vulnerability exists in IKEv1 packet processing code in Cisco IOS, Cisco IOS XE and Cisco IOS XR Software. The vulnerability , known as Pix Pocket, is due to insufficient condition checks in the IKEv1 security negotiation requests. A successful could cause disclosure of confidential information...
Cisco IOS XE Software IKEv1 State Machine DoS (CSCuw08236)
According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 1 IKEv1 subsystem due to insufficient condition checks in the IKEv1 state machine. An unauthenticated, remote attack...
Avant Browser 8.0.2 Long HTTP Request Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8471/info It has been reported that a buffer overflow condition exists in the Avant Browser software that may cause an attacker to run arbitrary code on a vulnerable host in order to gain unauthorized access to the system...