CVE-2021-1236 Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit...

CVE-2021-1236 Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit...

CVE-2021-1223 Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of an HTTP range header. An attacker could exploit this...

CVE-2021-0222

A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending certain crafted protocol packets from an adjacent device with invalid payloads to the device. These crafted packets, which should be discarded, are instead replicated and sent...

PT-2021-1738 · Cisco +1 · Snort +1

Name of the Vulnerable Software and Affected Versions: Multiple Cisco products affected versions not specified Description: The issue is related to a flaw in the detection algorithm of the Snort application detection engine, which could allow an unauthenticated, remote attacker to bypass the...

CVE-2021-1236: Always-Incorrect Control Flow Implementation

Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit...

Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...

Denial of Service Vulnerability in TP-Link TL-XDR3230 Easy Show Edition

The TL-XDR3230 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-XDR3230 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...

Denial of Service Vulnerability in TP-Link TL-XDR1850 Easy Show Edition

The TL-XDR1850 Easy Show Edition is a wireless router. A denial of service vulnerability exists in the TP-Link TL-XDR1850 Easy Show Edition. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully...

Huawei Mate 30 Buffer Overflow Vulnerability (CNVD-2021-05397)

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 30 suffers from a buffer overflow vulnerability that can be exploited by an attacker by sending a crafted packet with specific parameters to the target device. Due to insufficient validation of the parameters, ...

Crimson Null Pointer Dereference Vulnerability

Crimson is a programming software from Red Lion. A null pointer dereference vulnerability exists in the protocol converter in Crimson. An attacker could exploit this vulnerability by sending specially crafted packets to cause the device to reboot...

Denial of Service Vulnerability in Tenda AC23

The Tenda AC23 is a $100 router. A denial of service vulnerability exists in the Tenda AC23. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully constructed packet to a specific destination address...

Huawei SMC security vulnerabilities

Huawei Mate 30 is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 30 suffers from a buffer overflow vulnerability that can be exploited by an attacker by sending a crafted packet with specific parameters to the target device. Due to insufficient validation of the parameters, ...

CVE-2020-12522

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...

Design/Logic Flaw

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...

CVE-2020-12522 Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...

PT-2020-13155

Name of the Vulnerable Software and Affected Versions WAGO Series PFC 100 versions 750-81xx/xxx-xxx with firmware versions =FW10 WAGO Series PFC 200 versions 750-82xx/xxx-xxx with firmware versions =FW10 WAGO Series Wago Touch Panel 600 Standard Line versions 762-4xxx with firmware versions =FW10...

PT-2020-10124

Name of the Vulnerable Software and Affected Versions XHQ versions prior to 6.1 Description A vulnerability has been identified in the web interface, allowing attackers to traverse through the file system of the server by sending specially crafted packets over the network without authentication...

UBUNTU-CVE-2020-26418

Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file...

CVE-2020-24633

There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211 of access-points or controllers in Aruba 9000 Gateway; Aruba 7000 Series...