1581 matches found
JavaScript Percent-Encoding Obfuscation
Although various security products provide coverage against many web vulnerabilities, such as ActiveX exploits, these known exploits could potentially bypass security products by using JavaScript obfuscation techniques.An example of such a technique is percent-encoding, also known as URL encoding...
SSL 3.0 MITM Attack
A vulnerability affecting most implementations of SSL 3.0 has been discovered that allows an attacker to decrypt some encrypted contents under certain conditions CVE-2014-3566. The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak...
CVE-2014-3406
Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...
Race condition
Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...
CVE-2014-3406
Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...
CVE-2014-3406
CVE-2014-3406 describes a race condition in the IP logging feature of Cisco IPS Software up to version 7.1(7)E4 and earlier. The underlying issue allows an unauthenticated remote attacker to cause a denial of service via crafted IP traffic that hits a configured IP-logging rule, leading to a devi...
CVE-2014-3406: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...
CVE-2014-4284
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4280...
CVE-2014-4280
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4284...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4284...
CVE-2014-4280
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4284...
CVE-2014-4284
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4280...
CVE-2014-4280
Technical details for CVE-2014-4280 are not provided in the supplied documents; monitor for updates.
CVE-2014-4280: Undefined Security Weakness
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4284...
CVE-2014-4284: Undefined Security Weakness
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to IPS transfer module, a different vulnerability than CVE-2014-4280...
Cisco Intrusion Prevention System IP Logging Denial of Service Vulnerability
A vulnerability in the IP logging feature of Cisco Intrusion Prevention System IPS Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to a race condition when writing the IP logging file. An attacker could exploit this...
CVE-2014-3402
The authentication-manager process in the web framework in Cisco Intrusion Prevention System IPS 7.08E4 and earlier in Cisco Intrusion Detection System IDS does not properly manage user tokens, which allows remote attackers to cause a denial of service temporary MainApp hang via a crafted...
Authentication flaw
The authentication-manager process in the web framework in Cisco Intrusion Prevention System IPS 7.08E4 and earlier in Cisco Intrusion Detection System IDS does not properly manage user tokens, which allows remote attackers to cause a denial of service temporary MainApp hang via a crafted...
CVE-2014-3402
CVE-2014-3402 affects Cisco IPS/IDS web framework: authentication-manager mismanages user tokens, enabling an authenticated remote attacker to trigger a DoS (MainApp hang) via a crafted request to the management interface. Valid for IPS 7.0(8)E4 and earlier. Exploitation requires existing authent...
CVE-2014-3402
The authentication-manager process in the web framework in Cisco Intrusion Prevention System IPS 7.08E4 and earlier in Cisco Intrusion Detection System IDS does not properly manage user tokens, which allows remote attackers to cause a denial of service temporary MainApp hang via a crafted...