7513 matches found
CVE-2017-14855
CVE-2017-14855 affects Red Lion HMI panels. An attacker can remotely cause a Denial of Service by sending an HTTP POST to a long URI that does not exist, as demonstrated on HMI 2.41 PLC 2.42. The connected documents confirm the affected product (Red Lion HMI panels) and the vulnerability mechanis...
CVE-2017-14855
Red Lion HMI panels allow remote attackers to cause a denial of service software exception via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42...
DEBIAN-CVE-2017-11697
The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...
SUSE-SU-2017:3392-1 Security update for libraw
This update for libraw fixes the following issues: Security issues fixed: - CVE-2017-13735: A floating point exception in kodakradcloadraw could be used by attackers to crash a libraw using application bsc1060321 - CVE-2017-14608: An out-of-bounds read in the kodak65000loadraw function could be...
Huawei MHA-AL00A Resource Management Error Vulnerability
The Huawei MHA-AL00A is a smartphone product from the Chinese company Huawei Huawei. A resource management error vulnerability exists in Huawei MHA-AL00A MHA-AL00AC00B125 version, which originates from the system failing to properly lock resources when processing a registered operation. An attack...
The vulnerability of the altivec_unavailable_exception function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the altivecunavailableexception function arch/powerpc/kernel/traps.c in the Linux operating system is related to errors in data processing on 64-bit operating systems. This occurs when CONFIGALTIVEC is defined, and the processor supports Activec, but its support is not detect...
Intel Content Protection HECI Service - Type Confusion Privilege Escalation Exploit
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1358 Intel Content Protection HECI Service Type Confusion EoP Platform: Tested on Windows 10, service version 9.0.2.117 Class: Elevation of Privilege Summary: The Intel Content...
Memory leak vulnerability in multiple Huawei products (CNVD-2017-37732)
Huawei AR120-S and others are router products from Huawei China. A memory leak vulnerability exists in multiple Huawei products due to a program failing to properly free allocated memory for processing messages. A remote attacker could exploit the vulnerability by sending specially crafted H323...
Null Pointer Reference Vulnerability in Multiple Huawei Products
Huawei AR and SRG series enterprise routers are all-in-one routers for small and medium-sized offices or branches of small and medium-sized enterprises launched by Huawei; TE series, DP300, and MAX PRESENCE are all integrated desktop smart products and high-definition videoconferencing terminals...
undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS
It was discovered that a long URL sent to EAP 7 Server operating as a reverse proxy with default buffer sizes causes a Denial of Service...
CVE-2017-1000407
The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic...
Common Open Policy Service Protocol module buffer error vulnerability in multiple Huawei products
Huawei DP300 and others are products of Huawei, China.Huawei DP300 is a videoconferencing terminal.IPS Module is an intrusion prevention and intrusion detection product.NGFW Module is a firewall product.Common Open Policy Service Protocol COPS is one of the Common Open Policy Service Protocol COP...
IKEv2 protocol memory out-of-bounds access vulnerability in multiple Huawei products (CNVD-2017-38287)
Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...
Multiple Huawei Products IKEv2 Protocol Memory Out-of-Bounds Access Vulnerability
Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A memory out-of-bounds access vulnerability exists ...
Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37973)
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...
Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37974)
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...
Buffer overflow vulnerability in SIP backup module of multiple Huawei products (CNVD-2017-37976)
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in several Huawei products due to the...
Debian DLA-1191-1 : python-werkzeug security update
A security issue that allows XSS on the Werkzeug debugger allows remote attackers to inject arbitrary stuff via a field that contains an exception message. For Debian 7 'Wheezy', these problems have been fixed in version 0.8.3+dfsg-1+deb7u1. We recommend that you upgrade your python-werkzeug...
FreeBSD : mediawiki -- multiple vulnerabilities (298829e2-ccce-11e7-92e4-000c29649f92)
mediawiki reports : security fixes : T128209: Reflected File Download from api.php. Reported by Abdullah Hussam. T165846: BotPasswords doesn't throttle login attempts. T134100: On private wikis, login form shouldn't distinguish between login failure due to bad username and bad password. T178451:...
