The vulnerability of the SMBv1 protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...

Cisco ASA Software Denial of Service Vulnerability

Cisco ASA 1000V Cloud Firewall and so on are the products of the American Cisco Cisco company.Cisco ASA 1000V Cloud Firewall is a set of cloud firewall solutions.Cisco ASA 5500 Series Adaptive Security Appliances is the Cisco ASA 5500 Series Adaptive Security Appliances is the next generation of...

VulnCheck KEV: CVE-2017-0148

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets...

Wireshark NCP Parser Input Validation Vulnerability

Wireshark formerly known as Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.NCP dissector is one of the network control protocol parsers. An input validatio...

Bro 'analyzer/protocol/dnp3/DNP3.cc' file buffer overflow vulnerability

Bro is an open source framework for network analysis and security monitoring . A security vulnerability exists in the analyzer/protocol/dnp3/DNP3.cc file in Bro versions prior to 2.3.2. A remote attacker can exploit this vulnerability to cause a denial of service buffer overflow or buffer...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2017-06095)

Cisco IOS and IOS XE are operating systems developed by Cisco for its network devices.EnergyWise is one of the energy management architecture modules. A denial of service vulnerability exists in the EnergyWise module of Cisco IOS and Cisco IOS XE, which arises from a program's failure to properly...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2017-06094)

Cisco IOS and IOS XE are operating systems developed by Cisco for its network devices.EnergyWise is one of the energy management architecture modules. A denial of service vulnerability exists in the EnergyWise module of Cisco IOS and Cisco IOS XE, which arises from a program's failure to properly...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2017-06096)

Cisco IOS and IOS XE are operating systems developed by Cisco for its network devices.EnergyWise is one of the energy management architecture modules. A denial of service vulnerability exists in the EnergyWise module of Cisco IOS and Cisco IOS XE, which arises from a program's failure to properly...

CVE-2017-6608

A vulnerability in the Secure Sockets Layer SSL and Transport Layer Security TLS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of crafted SSL or TLS packets. An attacker could explo...

CVE-2017-3862

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2017-3863

Multiple vulnerabilities in the EnergyWise module of Cisco IOS 12.2 and 15.0 through 15.6 and Cisco IOS XE 3.2 through 3.18 could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service DoS condition. These...

CVE-2016-6368

A vulnerability in the detection engine parsing of Pragmatic General Multicast PGM protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is...

Juniper Junos for EX Series Switches IPv6 Neighbor Discovery DoS (JSA10781)

According to its self-reported version, the remote Juniper Junos EX Series device is affected by a memory leak issue in IPv6 processing when handling a specially crafted IPv6 Neighbor Discovery ND packet. An unauthenticated, remote attacker can exploit this, via a malicious network-based flood of...

PT-2017-2113 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions prior to 8.47.31 Cisco ASA Software versions prior to 9.04.39 Cisco ASA Software versions prior to 9.17 Cisco ASA Software versions prior to 9.24.6 Cisco ASA Software versions prior to 9.33.8 Cisco ASA Software...

SAP NetWeaver Buffer Overflow Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A buffer overflow vulnerability exists in SAP NetWeaver versions 7.0 through 7.5. A remote attacker could exploi...

Juniper Networks Junos OS LDP DoS Vulnerability

Junos OS is prone to a denial of service DoS vulnerability. when receiving crafted LDP packets. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

UBUNTU-CVE-2017-7701

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type...

ALPINE-CVE-2017-7701

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type...

DEBIAN-CVE-2017-7701

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-bgp.c by using a different integer data type...

UBUNTU-CVE-2016-7957

In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-byte memcmp for potentially shorter strings...