PDF Containing Encrypted Data

PDF files may include encrypted data. A remote attacker may use such encrypted data inside PDF files to hide attacks against various PDF vulnerabilities, in order to evade IPS inspection. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it m...

JavaScript Malicious Obfuscation Techniques - Ver2

Known exploits could potentially bypass security products by using JavaScript obfuscation techniques. Since the exploits are obfuscated they may not be detected by IDS and IPS systems, thus allowing attackers to successfully attack target machines...

Symantec Workspace Streaming XMLRPC Unauthenticated Access

SUMMARY The management server for Symantec Workspace Streaming SWS does not properly handle external XMLRPC requests, which could potentially allow unauthorized access to restricted server-side data and server functionality. A remote user could potential create a backdoor on the targeted server...

Cloudflare: Bug Report

Vulnerability description modnegotiation is an Apache module responsible for selecting the document that best matches the clients capabilities, from one of several available documents. If the client provides an invalid Accept header, the server will respond with a 406 Not Acceptable error...

Microsoft Windows XP Operating System

Windows XP is an older version of Microsoft Windows. Microsoft ended the support for Windows XP operating system on April 8th 2014. As a result computers using the OS might become more vulnerable to security risks and viruses. There are cases in which certain traffic, although not intended for...

Microsoft Windows 3.11 Operating System

Windows 3.11 is an older version of Microsoft Windows. Microsoft ended the support for Windows 3.11 operating system on December 2001. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Microsoft Windows NT 4.0 Operating System

Windows NT 4.0 is an older version of Microsoft Windows. Microsoft ended the support for Windows NT 4.0 operating system on 2004. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Microsoft Windows 2000 Operating System

Windows 2000 is an older version of Microsoft Windows. Microsoft has ended the support for Windows 2000 operating system on July 13th 2010. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by I...

CVE-2014-0592

Barclamp aka barclamp-network 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs...

CVE-2014-0592

CVE-2014-0592 concerns Barclamp (aka barclamp-network) version 1.7 used in SUSE Cloud 3. It reports that the Crowbar Framework component does not enable netfilter on bridges when creating new instances, allowing remote attackers to bypass security group restrictions via unspecified vectors relate...

CVE-2014-0592: Undefined Security Weakness

Barclamp aka barclamp-network 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs...

PT-2014-3696

Name of the Vulnerable Software and Affected Versions Barclamp aka barclamp-network version 1.7 Description The issue allows remote attackers to bypass security group restrictions via unspecified vectors, related to floating IPs, because netfilter is not enabled on bridges when creating new...

Microsoft Internet Explorer 8

Internet Explorer 8 IE8 is an older version of Microsoft Internet Explorer. Using IE8 may indicate suspicious activity. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

Cisco IPS MainApp SNMP DoS (CSCul49309)

A vulnerability in Cisco IPS Software could allow an unauthenticated, remote attacker to cause the MainApp to hang intermittently due to improper handling of SNMP packets sent to the management interface. Note that, in order to for the remote host to be affected by this issue, SNMP must be enable...

Cisco IPS MainApp SNMP Denial of Service Vulnerability

A vulnerability in the SNMP code of Cisco Intrusion Prevention System IPS Software could allow an unauthenticated, remote attacker to cause the MainApp process to become unresponsive. This creates a denial of service DoS condition because the Cisco IPS sensor is not able to execute several critic...

CVE-2014-2103

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

Design/Logic Flaw

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

CVE-2014-2103

Cisco IPS Software is affected by CVE-2014-2103 where the MainApp process can be caused to hang (DoS) by malformed SNMP packets sent to the management interface. This requires SNMP to be enabled and, per advisories, is exploitable remotely by an unauthenticated attacker (for CSCul49309), with som...

CVE-2014-2103: Improper Input Validation

Cisco Intrusion Prevention System IPS Software allows remote attackers to cause a denial of service MainApp process outage via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309...

PT-2014-4485

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a MainApp process outage, by sending malformed SNMP packets. Recommendation...