UBUNTU-CVE-2012-5645

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption...

CVE-2019-5266

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled...

CVE-2019-5266

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled...

Input validation

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled...

CVE-2019-5266

Huawei Share function in P30 9.1.0.193C00E190R2P1 smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled...

CVE-2019-5073

An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.0713 and 03.00.3912, and WAGO PFC100 Firmware version 03.00.3912. A specially crafted set of packets can cause an external tool to fail, resulting in...

DEBIAN-CVE-2019-5152

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An...

UBUNTU-CVE-2019-5152

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An...

WAGO PFC200 Buffer Overflow Vulnerability (CNVD-2019-46394)

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A buffer overflow vulnerability exists in the WAGO PFC200. An attacker can exploit this vulnerability to execute code with the help of specially crafted packets...

Security Advisory - Insufficient Input Validation Vulnerability in Huawei Share

There is an insufficient input validation vulnerability in Huawei Share. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled. Vulnerability ID: HWPSIRT-2019-09454 This vulnerability has been assigne...

WAGO PFC200 Access Control Error Vulnerability (CNVD-2019-46396)

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. An access control error vulnerability exists in the WAGO PFC200. An attacker could exploit this vulnerability to cause a denial of service with the help of specially crafted packets to bring the device into an incorrect sta...

Cisco NX-OS Software Simple Network Management Protocol DoS (cisco-sa-20190515-nxos-snmp-dos)

According to its self-reported version, Cisco NX-OS Software is affected by a denial of service DoS vulnerability in the Simple Network Management Protocol SNMP input packet processor due to improper error handling when processing inbound SNMP packets. An unauthenticated, remote attacker can...

WAGO PFC200 Buffer Overflow Vulnerability

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A buffer overflow vulnerability exists in the WAGO PFC200. An attacker can exploit this vulnerability to execute code with the help of specially crafted packets...

Cisco IOS XE Software Switch Integrated Security Features IPv6 DoS (cisco-sa-20180328-sisf)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Switch Integrated Security Features due to incorrect handling of crafted IPv6 packets. An unauthenticated, remote attacker can exploit this, by sending crafted IPv6 packets to...

CVE-2019-5235

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal...

Siemens SPPA-T3000 MS3000 Migration Server Integer Overflow Vulnerability (CNVD-2019-45383)

SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.MS3000 Migration Server is one of the migration servers. An integer overflow vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker with networ...

CVE-2019-18335

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an...

CVE-2019-18335

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an...

CVE-2019-18333

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs t...

CVE-2019-18329

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability i...