Siemens Scalance W1750D Buffer Copy without Checking Size of Input (CVE-2023-45616)

There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba's access point management protocol UDP port 8211. Successful exploitation of this vulnerabilit...

CVE-2024-30405

An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 line cards while ALGs are enabled allows an attacker sending specific crafted packets to cause a transit traffic Denial of Service DoS. Continued receipt and processing of these...

CVE-2024-30405

An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 line cards while ALGs are enabled allows an attacker sending specific crafted packets to cause a transit traffic Denial of Service DoS. Continued receipt and processing of these...

Juniper Networks Junos OS SRX 安全漏洞

Juniper Networks Junos OS SRX is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS SRX 5000 versions prior to 21.2R3-S7, 21.4R3-S6, 22.1R3-S5,...

PT-2024-2948 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS SRX 5000 Series versions prior to 21.2R3-S7 Juniper Networks Junos OS SRX 5000 Series version 21.4 versions prior to 21.4R3-S6 Juniper Networks Junos OS SRX 5000 Series version 22.1 versions prior to 22.1R3-S5 Junipe...

Palo Alto Networks PAN-OS 10.2.x < 10.2.7-h3 / 11.0.x < 11.0.4 / 11.1.x < 11.1.2 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.7-h3 or 11.0.x prior to 11.0.4 or 11.1.x prior to 11.1.2. It is, therefore, affected by a vulnerability. - A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burs...

The vulnerability of the FTP service provided by the microprogramming software for DJI Mavic Mini 3 Pro allows a intruder to trigger a service failure.

The vulnerability of the FTP service provided by DJI’s Mavic Mini 3 Pro micro-software systems is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets...

DJI Mavic 安全漏洞

DJI Mavic is a series of drones from Chinese company DJI. A security vulnerability exists in the DJI Mavic Mini 3 Pro that stems from the presence of an incorrect input validation issue that allows an attacker to craft malicious packets leading to a denial of service attack on the FTP service...

The vulnerability of the T.38 discanner, a traffic analysis tool for computer networks used by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the T.38 discapper, a traffic analysis tool for computer networks developed by Wireshark, is related to unsynchronized memory management. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted file or packet...

ROS-20240402-10

A vulnerability in the NetScreen file parser of Wireshark, a computer network traffic analyzer, is related to an operation exceeding buffer boundaries. operation out of buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service Vulnerabilit...

PT-2024-2453

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS x86 versions 6.40.5 through 6.49.10 Description An issue in the processing of input data allows a remote attacker to cause a denial of service, resulting in a device crash. This is achieved by sending crafted packet data to t...

CVE-2024-20308

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properl...

CVE-2024-20314

A vulnerability in the IPv4 Software-Defined Access SD-Access fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service DoS condition on an affected device. This...

PT-2024-2501 · Wireshark +4 · Wireshark +4

Name of the Vulnerable Software and Affected Versions: Wireshark versions 4.0.0 through 4.0.13 Wireshark versions 4.0.3 through 4.2.0 Description: The issue is related to the T.38 dissector in Wireshark and is caused by improper memory management. Exploitation of this issue may allow an attacker ...

The vulnerability of the PPP over Ethernet (PPPoE) network gateway function in Cisco IOS XR operating systems allows a hacker to induce a service failure.

The vulnerability of the PPP over Ethernet PPPoE network gateway function in Cisco IOS XR operating systems is related to insufficient input data validation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specific PPPoE packets...

The vulnerabilities of the modules of the central processor in microprogrammed logic controllers of the MELSEC-Q Series and MELSEC-L Series allow a hacker to execute arbitrary code.

The vulnerability of the modules of the central processor in microprogrammed logic controllers of the MELSEC-Q Series and MELSEC-L Series is related to errors during the scaling of indicators. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially...

CVE-2024-2169

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service DOS and/or abuse of resources...

CVE-2024-2169 Implementations of UDP application protocols are susceptible to network loops and denial of service

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service DOS and/or abuse of resources...

CVE-2024-2169 Implementations of UDP application protocols are susceptible to network loops and denial of service

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service DOS and/or abuse of resources...

ovn: insufficient validation of BFD packets may lead to denial of service

A flaw was found in the Open Virtual Network OVN. In OVN clusters where BFD is used between hypervisors for high availability, an attacker can inject specially crafted BFD packets from inside unprivileged workloads, including virtual machines or containers, that can trigger a denial of service...