Kernel: KVM: DoS via write flood to I/O port 0x80

Linux kernel Virtualization Module CONFIGKVM for the Intel processor family CONFIGKVMINTEL is vulnerable to a DoS issue. It could occur if a guest was to flood the I/O port 0x80 with write requests. A guest user could use this flaw to crash the host kernel resulting in DoS...

Unprotected Database Exposes Personal Info of 80 Million American Households

A team of security researchers has claims to have found a publicly-accessible database that exposes information on more than 80 million U.S. households—nearly 65 percent of the total number of American households. Discovered by VPNMentor's research team lead by hacktivists Noam Rotem and Ran Loca...

CVE-2019-3886

creationtimestamp| type| source ---|---|--- 2019-04-18 20:29:04+00:00| seen| https://t.me/cibsecurity/3810...

CVE-2018-13798

A vulnerability has been identified in SICAM A8000 CP-8000 All versions V14, SICAM A8000 CP-802X All versions V14, SICAM A8000 CP-8050 All versions V2.00. Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service...

PT-2019-18163 · Cscape · Cscape

Name of the Vulnerable Software and Affected Versions: Cscape versions 9.80 SP4 and prior Description: An improper input validation issue may be exploited by processing specially crafted POC files, potentially allowing an attacker to read confidential information and remotely execute arbitrary...

ZyXEL NSA325 V2 Cross-Site Request Forgery Vulnerability

The ZyXEL NSA325 V2 is a network storage device from Hopkins ZyXEL Technology. A security vulnerability exists in the web application of the ZyXEL NSA325 V2 version 4.81. The vulnerability can be exploited by an attacker to perform a state change operation using a specially crafted HTTP form...

OpenJDK: Improper field access checks (Hotspot, 8199226)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

UBUNTU-CVE-2018-3139

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Micro Focus ArcSight Management Center Unauthenticated File Download Vulnerability

Micro Focus ArcSight Management Center ArcMC is a security management center from Micro Focus UK that centrally manages ArcSight e.g. HP ArcSight Logger, etc. deployments through a unified interface. An unauthenticated file download vulnerability exists in Micro Focus ArcMC versions prior to 2.81...

FTPShell Server Denial of Service Vulnerability

FTPShell Server is a safe and reliable FTP client tool. A security vulnerability exists in FTPShell Client version 6.80. An attacker can exploit this vulnerability to launch a denial of service attack...

CVE-2018-8871

In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerability, which may allow remote code execution...

UBUNTU-CVE-2018-10471

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754...

DEBIAN-CVE-2018-10471

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754...

Cisco IOS Software and IOS XE Software Denial of Service Vulnerability (CNVD-2018-07302)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the DHCP option 82 encapsulation feature in Cisco IOS Software and IOS XE Software, which arises from the program's failure to perform full inp...

Cisco IOS Software and IOS XE Software Denial of Service Vulnerabilities

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the DHCP option 82 encapsulation feature in Cisco IOS Software and IOS XE Software, which arises from the program's failure to perform full inp...

CVE-2018-0174

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability exists because the affected...

CVE-2018-0173

A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 DHCPv4 packets could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a Relay Reply denial of service DoS...

PT-2018-3805 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and IOS XE Software affected versions not specified Description: A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 DHCPv4 packets could...

PT-2018-3807 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the DHCP option 82 encapsulation functionality could allow an unauthenticated, remote attacker to cause an affected device to reload,...

PT-2018-3806 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability exists in the DHCP option 82 encapsulation functionality due to incomplete input validation of option 82 information received in DHCP...