CVE-2018-5469

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified,...

CVE-2018-5469

The CVE-2018-5469 issue affects Belden Hirschmann Classic Platform Switches (RS, RSR, RSB, MACH100/1000/4000, MS, OCTOPUS). The web interface suffers from an improper restriction of excessive authentication attempts, enabling brute-force authentication against device management. Public sources in...

CVE-2018-5469: Improper Restriction of Excessive Authentication Attempts

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified,...

Mobile Menace Monday: Olympics app has more ads than games

An app claiming to live stream the 2018 Winter Olympics but really serving up a blizzard of ads had a short run on Google Play. It was uploaded to the Play store on February 8, 2018. Since then, it's been removed. The last known existence of it on the store was a cached snapshot from February 10...

Denial of service

A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could exploit TLS SNI configuration lookups, leading to excessive memory usage and the process to restart...

Design/Logic Flaw

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control...

CVE-2018-5501

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control...

CVE-2018-5501

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control...

PT-2018-16995

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 11.2.1 F5 BIG-IP systems versions 11.5.x F5 BIG-IP systems versions 11.6.x F5 BIG-IP systems versions 12.1.0 through 12.1.3.1 F5 BIG-IP systems version 13.0.0 Description The issue is related to the TCP DNS profile,...

PT-2018-18934

Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.13 Wireshark versions 2.4.0 through 2.4.5 Description The issue concerns a potential crash in the LWAPP dissector due to excessive recursion depth. This was resolved by limiting the encapsulation levels in...

CVE-2018-7321: Excessive Iteration

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-thrift.c had a large loop that was addressed by not proceeding with dissection after encountering an unexpected type...

CVE-2018-7323: Excessive Iteration

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-wccp.c had a large loop that was addressed by ensuring that a calculated length was monotonically increasing...

Null pointer dereference

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available space, a crash due to a NULL pointer dereference would occur...

lighttpd < 1.4.16 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.16. It is, therefore, affected by multiple vulnerabilities : - modauth allows remote attackers to cause a denial of service via unspecified vectors involving 1 a memory leak, 2 use of md5-sess without a...

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

Design/Logic Flaw

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...

CVE-2018-6352

PoDoFo 0.9.5 contains a denial-of-service vulnerability in the PdfParser::ReadObjectsInternal function (base/PdfParser.cpp) caused by excessive iteration on crafted PDF files. This affects PoDoFo 0.9.5 as described in CVE-2018-6352 and is reflected across multiple sources (NVD and CNVD entries). ...

CVE-2018-6352

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file...