CVE-2019-12673: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...

Trusted Path Elevation of Privilege Vulnerability in Micropoint Baihui Intelligent Defense Software Enterprise Edition

Micropoint Baihui Intelligent Defense Software Enterprise Edition is a new generation of network antivirus products developed by Micropoint Baihui for enterprise network virus protection and management characteristics. The enterprise version of Micropoint Intelligent Defense Software has a truste...

Elevation of Privilege Vulnerability in Micropoint Baihui Intelligent Defense Software Personal Edition

Micropoint Baihui Beijing Information Security Technology Co., Ltd. is mainly engaged in the research, development, production and sales of network information security products. There is an elevation of privilege vulnerability in the Personal Edition of Micropoint Baihui Intelligent Defense...

CVE-2019-1970 Cisco Firepower Threat Defense Software File Policy Bypass Vulnerability

A vulnerability in the Secure Sockets Layer SSL/Transport Layer Security TLS protocol inspection engine of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors...

CVE-2019-1715

A vulnerability in the Deterministic Random Bit Generator DRBG, also known as Pseudorandom Number Generator PRNG, used in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a cryptographic...

CVE-2019-1699 Cisco Firepower Threat Defense Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into argument...

CVE-2019-1687: Improper Input Validation

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

CVE-2018-15388: Uncontrolled Resource Consumption

A vulnerability in the WebVPN login process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing...

CVE-2019-1714: Undefined Security Weakness

A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 Single Sign-On SSO for Clientless SSL VPN WebVPN and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated,...

CVE-2019-1691: Improper Input Validation

A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service DoS condition. The vulnerability is due to the incomplete error handli...

Cisco Firepower Threat Defense Software SSL or TLS Denial of Service Vulnerability

A vulnerability in the detection engine of Cisco Firepower Threat Defense Software could allow an unauthenticated, remote attacker to cause the unexpected restart of the SNORT detection engine, resulting in a denial of service DoS condition. The vulnerability is due to the incomplete error handli...

CVE-2019-1669 Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability

A vulnerability in the data acquisition DAQ component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service DoS condition. The vulnerability exists because the affected software...

CVE-2018-15397 Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability

A vulnerability in the implementation of Traffic Flow Confidentiality TFC over IPsec functionality in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly,...

CVE-2018-15383: Uncontrolled Resource Consumption

A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service DoS...

CVE-2018-0228

A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to cause the CPU to increase upwards of 100% utilization, causing a denial of service DoS condition on an affected system. The vulnerability is due t...

Multiple Cisco Products Adaptive Security Appliance and Firepower Threat Defense Software Denial of Service Vulnerabilities

Cisco 3000 Series Industrial Security Appliances ISR and others are security firewall appliances from Cisco.Adaptive Security Appliance ASA and Firepower Threat Defense FTD Software are firewall software used in different Cisco security appliances. Adaptive Security Appliance ASA and Firepower...

CVE-2018-6629

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000118...

Input validation

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8000010c...

CVE-2018-6629

CVE-2018-6629 affects Micropoint proactive defense software 2.0.20266.0146. The vulnerability resides in the mp110005.sys driver, where IOCTL 0x80000118 input values are not validated, enabling a local attacker to trigger a denial of service (BSOD) and potentially other impact. Connected sources ...

CVE-2018-6630

CVE-2018-6630 affects Micropoint Proactive Defense Software 2.0.20266.0146. The mp110005.sys driver does not validate input values in IOCTL 0x8000014c, enabling a local attacker to trigger a denial of service (BSOD) or potential other impact. Documents from NVD, Red Hat, CNVD, and CNVD-family sou...