The vulnerability of the Remote Access VPN function in microprogramming-based network interface devices of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the Remote Access VPN function in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to...

CVE-2024-33700

The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers to cause a denial of service through a series of malformed FTP commands. This can lead to device reboots and service disruption...

CVE-2024-33700

CVE-2024-33700 concerns the LevelOne WBR-6012 router, firmware R0.40e6, where a vulnerability in the FTP handling causes denial of service via a series of malformed, unauthenticated FTP commands. The root cause is improper input validation within the FTP functionality, allowing crafted FTP inputs...

ABB Cylon Aspect 3.08.01 jsonProxy.php Denial Of Service

ABB Cylon Aspect 3.08.01 jsonProxy.php Denial of Service Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy management and contr...

LevelOne WBR-6012 FTP improper input validation vulnerability

Talos Vulnerability Report TALOS-2024-1998 LevelOne WBR-6012 FTP improper input validation vulnerability October 30, 2024 CVE Number CVE-2024-33700 SUMMARY The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attackers...

The vulnerability in the configuration of the traceoptions feature of the BGP protocol in the routing protocol rpd of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause a service failure.

The vulnerability of the traceoptions configuration in the BGP protocol of the routing protocol rpd for Juniper Networks’ Junos OS and Junos OS Evolved is related to improper verification of consistency in input data. Exploiting this vulnerability allows a malicious actor to cause service...

The vulnerability of the BPF_CALL_1() function in the Linux operating system’s kernel component allows a hacker to trigger a service failure.

The vulnerability of the BPFCALL1 function in the kernel/bpf/helpers.c module of the Linux BPF component is related to incorrect serialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-8309

A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service DoS by deleting all data, breaches in multi-tenant securit...

PT-2024-10219 · Schneider Electric · Powerlogic Hdpm6000

Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic HDPM6000 versions up to 0.62.7 Description: The issue is related to an Improper Restriction of Operations within the Bounds of a Memory Buffer, which could allow an unauthorized attacker to modify configuration...

The vulnerability of the nvmet-fc component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nvmet-fc component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ntfs3 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ntfs3 component in the Linux operating system’s kernel is related to errors in reading data beyond the boundaries of the buffer memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PYSEC-2024-299

Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...

CVE-2024-10455

Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...

PYSEC-2024-299

Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...

CVE-2024-10455

CVE-2024-10455 affects µD3TN v0.14.0’s BPv7 parser. A reachable assertion can be triggered by a malformed Extension Block, potentially disrupting service. Reported across multiple feeds (Red Hat, NVD, CNNVD, PT-Security, etc.). Mitigation notes from PT-Security suggest disabling the BPv7 parser u...

CVE-2024-10455 Reachable Assertion in µD3TN

Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...

CVE-2024-10455

Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block...

The vulnerability of the formSetWAN_Wizard51() and formSetWAN_Wizard52() functions in the D-Link DIR-605L router software allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWANWizard51 and formSetWANWizard52 functions in the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

Vulnerability of the Server: X Plugin component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Oracle MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the ODXSW_DLL.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to disclose protected information, execute arbitrary code, or cause service interruptions.

The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD modeling, design, and drawing software, relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information, execute arbitrary code, or cause a service...