Lucene search
+L

58 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/21 12:00 a.m.•8 views

CVE-2019-1698: Improper Restriction of XML External Entity Reference

A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director IoT-FND Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External...

4.9CVSS6AI score0.03122EPSS
SaveExploits0References3
Cisco
Cisco
•added 2019/02/20 4:00 p.m.•87 views

Cisco IoT Field Network Director XML External Entity Vulnerability

A vulnerability in the web-based user interface of Cisco Internet of Things Field Network Director IoT-FND Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External...

4.9CVSS0.8AI score0.03122EPSS
SaveExploits0References1
NVD
NVD
•added 2019/01/23 11:29 p.m.•28 views

CVE-2019-1644

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service DoS condition. The vulnerability is due to improper resource management for UDP ingress...

7.5CVSS7.5AI score0.02299EPSS
SaveExploits0References2
Prion
Prion
•added 2019/01/23 11:29 p.m.•32 views

Race condition

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service DoS condition. The vulnerability is due to improper resource management for UDP ingress...

5CVSS7.5AI score0.02299EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2019/01/23 11:00 p.m.•13 views

CVE-2019-1644 Cisco IoT Field Network Director Resource Exhaustion Denial of Service Vulnerability

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service DoS condition. The vulnerability is due to improper resource management for UDP ingress...

7.5CVSS7AI score0.02299EPSS
SaveExploits0References2
CVE
CVE
•added 2019/01/23 11:00 p.m.•99 views

CVE-2019-1644

CVE-2019-1644 affects Cisco IoT Field Network Director (IoT-FND). The issue is a resource-management error in the UDP ingress path that lets an unauthenticated, remote attacker send a high rate of UDP packets to exhaust system resources, causing a DoS. Affected component is the UDP protocol handl...

7.5CVSS7.5AI score0.02299EPSS
SaveExploits0References2Affected Software1
Cisco
Cisco
•added 2019/01/23 4:00 p.m.•187 views

Cisco IoT Field Network Director Resource Exhaustion Denial of Service Vulnerability

A vulnerability in the UDP protocol implementation for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to exhaust system resources, resulting in a denial of service DoS condition. The vulnerability is due to improper resource management for UDP ingress...

7.5CVSS1.4AI score0.02299EPSS
SaveExploits0References1
NVD
NVD
•added 2018/05/17 3:29 a.m.•32 views

CVE-2018-0270

A vulnerability in the web-based management interface of Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and alter the data of existing users and groups on an affected device. The vulnerability is due to...

8.8CVSS8.9AI score0.00684EPSS
SaveExploits0References2
CVE
CVE
•added 2018/05/17 3:00 a.m.•82 views

CVE-2018-0270

CVE-2018-0270 describes a CSRF vulnerability in the web-based management interface of Cisco IoT Field Network Director (IoT-FND) that could let an unauthenticated, remote attacker perform arbitrary actions with the privileges of the logged-in user by tricking them into following a malicious link....

8.8CVSS8.8AI score0.00684EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2017/09/07 9:29 p.m.•25 views

Memory corruption

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient...

7.8CVSS7.5AI score0.01738EPSS
SaveExploits0References2Affected Software2
NVD
NVD
•added 2017/09/07 9:29 p.m.•24 views

CVE-2017-6780

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient...

7.8CVSS7.5AI score0.01738EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/09/07 9:00 p.m.•33 views

CVE-2017-6780

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is due to insufficient...

7.5AI score0.01738EPSS
SaveExploits0References2
CVE
CVE
•added 2017/09/07 9:00 p.m.•82 views

CVE-2017-6780

CVE-2017-6780 describes a memory-exhaustion DoS in Cisco IoT Field Network Director (IoT-FND) due to insufficient rate-limiting in the TCP throttling path. An unauthenticated, remote attacker can send high-rate TCP traffic to a set of open ports, causing the device to consume memory and eventuall...

7.8CVSS7.5AI score0.01738EPSS
SaveExploits0References2Affected Software2
Cisco
Cisco
•added 2017/09/06 4:00 p.m.•57 views

Cisco IoT Field Network Director Memory Exhaustion Denial of Service Vulnerability

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart. The vulnerability is due to insufficient rate-limiting protection...

7.5CVSS7.5AI score0.01738EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2013/07/17 12:00 a.m.•2 views

PT-2013-4590

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3 Description The issue affects confidentiality and is related to Logging in the Oracle Application Object Library component. It is reported that the problem might be caused by the stora...

3.5CVSS0.01955EPSS
SaveExploits0References8
Prion
Prion
•added 2009/04/15 10:30 a.m.•32 views

Default credentials

The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users not DB users," which has unknown impact and attack vectors...

7.5CVSS6.8AI score0.01769EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/04/15 12:00 a.m.•5 views

CVE-2009-1000: Undefined Security Weakness

The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users not DB users," which has unknown impact and attack vectors...

7.5CVSS5.7AI score0.01769EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/12 12:00 a.m.•6 views

CVE-2003-1116: Undefined Security Weakness

The communications protocol for the Report Review Agent RRA, aka FND File Server FNDFS program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing...

5CVSS6AI score0.04446EPSS
SaveExploits0References1
Rows per page
Query Builder