8291 matches found
CVE-2017-6148
The CVE-2017-6148 issue affects F5 BIG-IP systems where a SOCKS proxy profile attached to a Virtual Server can disrupt TMM operations. Affected releases include BIG-IP 13.0.0 and 13.x; 12.x (12.0.0–12.1.3.1; 12.1.3.2 is the fix), and 11.x (11.5.1–11.5.5; 11.6.1–11.6.2; 11.6.3 is the fix). The vul...
CVE-2017-6155
On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure...
Denial of Service Vulnerability in Tengen Controls T920 PLCs
T-920 Programmable Logic Controller PLC is a product in the T9 series Programmable Logic Controller PLC series of China TengControl Technology TENGCONTROL TECHNOLOGY. The product is widely used in tobacco, petrochemical, water and other important industrial control site. A denial of service...
Remote Control Vulnerability in MAC1100 PLCs
The MAC1100 PLC Programmable Logic Controller PLC is a product in the Dalian Computer Control DCCE Programmable Logic Controller PLC series. A remote control vulnerability exists in the MAC1100 PLC. An attacker can use the vulnerability to remotely and directly control the start and stop of the...
The vulnerability of the php_stream_url_wrap_http_ex function in the PHP interpreter allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the phpstreamurlwraphttpex function located in ext/standard/httpfopenwrapper.c in the PHP interpreter arises due to an out-of-buffer operation on the stack. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by usi...
CVE-2017-17308
SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote...
PT-2018-3620 · Gnu +7 · Gnu Binutils +7
Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.30 Description: The issue allows attackers to cause a denial of service or possibly have other impacts, as demonstrated by an out-of-bounds write of 8 bytes during the execution of objdump. This can occur due to a...
The vulnerability of the ReadImage function in the Sam2p image conversion utility allows a attacker to cause a service failure or exert other effects.
The vulnerability of the ReadImage function input-bmp.ci in the Sam2p image conversion utility is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or other adverse effects...
The vulnerability of the blkcg_init_queue function in the Linux operating system allows a hacker to cause a service failure or exert other effects.
The vulnerability of the blkcginitqueue function in the Linux kernel’s block/blk-cgroup.c file is due to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or have other adverse effects...
The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library, which allows a hacker to cause a service failure or exert other effects.
The vulnerability of the gplotRead and ptaReadStream functions in the Leptonica image processing library is related to buffer overflow in the stack %s in the fscanf and sscanf functions. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially craft...
Authentication flaw
On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client...
CVE-2018-5502
On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client...
CVE-2018-5502
Summary (CVE-2018-5502) Affected product: F5 BIG-IP (LTM, etc.) with Client SSL profile handling client certificates. What’s vulnerable: BIG-IP virtual servers using a Client SSL profile that enables client certificate authentication. The vulnerability, stemming from how the system handles crafte...
The vulnerability of the functions snd_seq_write and snd_seq_ioctl_set_client_pool (seq_clientmgr.c) in the Linux kernel sound subsystem allows a attacker to cause a service failure.
The vulnerability of the sndseqwrite and sndseqioctlsetclientpool functions in the Linux kernel’s audio subsystem is related to multiprogramming errors race conditions. Exploiting this vulnerability can allow a remote attacker to cause service failures...
CVE-2017-17282
SCCP Signalling Connection Control Part module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An...
CVE-2017-17327
Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit...
CVE-2017-17168
The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...
CVE-2017-17169
The CIDAM Protocol on some Huawei Products has multiple input validation vulnerabilities due to insufficient validation of specific messages when the protocol is implemented. An authenticated remote attacker could send a malicious message to a target system. Successful exploit could allow the...
CVE-2017-17200
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323...
Vulnerability in Robots Can Lead To Costly Ransomware Attacks
CANCUN, Mexico – A vulnerability in Softbank Robotics’ NAO and Pepper robots can lead to costly ransomware attacks that could cause robots deployed in businesses to stop working, curse at customers, or even perform violent movements. The vulnerability was disclosed at Kaspersky Lab’s Security...