Monero (Lithium Luna) Epee library security vulnerability

Monero Lithium Luna is a digital currency. Epee library is one of the open source Levin libraries.A security vulnerability exists in the Levin deserialization feature of Epee library used in Monero Lithium Luna version 0.12.2.0-master-ffab6700 and other cryptocurrencies. An attacker could exploit...

CVE-2020-7504

A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent...

CVE-2020-7502

A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller Firmware version 4.3 and prior, which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller...

The vulnerability of the Hyper-V hardware virtualization system for Microsoft Windows operating systems allows a attacker to trigger a failure mode that causes system downtime.

The vulnerability of the Hyper-V hardware virtualization technology for Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to induce a service failure by sending specially crafted network packets...

[ASA-202005-16] freerdp: information disclosure

Arch Linux Security Advisory ASA-202005-16 ========================================== Severity: High Date : 2020-05-23 CVE-ID : CVE-2020-13396 CVE-2020-13397 CVE-2020-13398 Package : freerdp Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1172 Summary ======= T...

CVE-2020-0909

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by...

Crlf injection

CRLF injection vulnerability in Network Center in Synology Router Manager SRM before 1.2.3-8017-2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted network traffic...

CVE-2019-11823

CRLF injection vulnerability in Network Center in Synology Router Manager SRM before 1.2.3-8017-2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted network traffic...

The vulnerability of the InnoDB component of the MySQL database management system allows attackers to modify data or cause service failures.

The vulnerability of the InnoDB component in the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify data or cause service failures by using specially crafted network packets...

The vulnerability of the Server:Optimizer component of the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially crafted network packets...

Vulnerability of the Server: Parser component of the MySQL database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server:Parser component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service interruptions using specially crafted network packets...

CVE-2020-6227

SAP Business Objects Business Intelligence Platform CMS / Auditing issues, version 4.2, allows attacker to send specially crafted GIOP packets to several services due to Improper Input Validation, allowing to forge additional entries in GLF log files...

The vulnerability of the microprogramming software for Siemens SIMATIC S7-1500 CPU Family programmable logic controllers allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

CVE-2019-19606

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...

Code injection

X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or arbitrary code execution...

Design/Logic Flaw

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash...

CVE-2017-18483

ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...

DEBIAN-CVE-2019-1010251

Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed network packet. The component is: app-layer-detect-proto.c, decode.c, decode-teredo.c an...

CVE-2019-1694

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...

The vulnerability of microprogrammed software in programmable logic controllers from SIMATIC, related to insufficient validation of input data, allows a malicious actor to trigger malfunctions during maintenance operations.

The vulnerability of microprogrammed software in programmable logic controllers from SIMATIC is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious individual to cause malfunctions in service operations by sending specially crafted packets to po...