CVE-2019-15276 Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists due to a failure of the HTTP parsing engine to handle specially...

CVE-2019-15276

CVE-2019-15276: Cisco Wireless LAN Controller HTTP parsing DoS . The vulnerability affects Cisco WLC software (versions 8.4–8.9, 8.10 fixed) where the HTTP parsing engine fails to handle specially crafted URLs. An attacker with low privileges (or a user who can be lured to click a crafted URL) ca...

Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Cisco Wireless Lan Controller due to a HTTP Parsing Engine Vulnerability. An unauthenticated, remote attacker can exploit this issue, via a HTTP request, to cause the device to stop responding. Please see the included Cisco Bug IDs and Cisco Securit...

SYS.2.2.3.A9

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Standard-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

CVE-2013-3070

CVE-2013-3070 affects Netgear WNDR4700 (firmware 1.0.0.34); the management web interface leaks the wireless PSK, causing partial confidentiality impact. Exploitation details and official remediation are not provided in the supplied documents.

The vulnerability of the MP4 demultiplexer in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or trigger a service denial.

The vulnerability of the MP4 demultiplexer in the VideoLAN VLC media player software relates to the exploitation of integer values. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by using a specially created .MP4 file...

The vulnerability of the VideoLAN VLC media player lies in the fact that operations are performed outside the buffer in memory, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerability of the VideoLAN VLC media player lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created .3GP file...

The vulnerability of the XSPF component in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the XSPF component in the VideoLAN VLC media player software is related to numerical processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the ReadMetaFromId3v2 function in the Media Player software VideoLAN VLC, which allows a hacker to cause a service failure

The vulnerability of the ReadMetaFromId3v2 function in the VideoLAN VLC media player’s code exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of the DecodeAdpcmImaQT function (modules/codec/adpcm.c) in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the DecodeAdpcmImaQT function modules/codec/adpcm.c in the VideoLAN VLC media player lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure using a specially...

Cisco Wireless LAN Controller HTTP Parsing Engine Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Wireless LAN Controller Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists due to a failure of the HTTP parsing engine to handle specially...

Cisco Wireless LAN Controller Software Input Validation Error Vulnerability (CNVD-2019-39768)

Cisco Wireless LAN Controller WLC Software is a suite of software for configuring and managing WLCs Wireless LAN Controllers from Cisco. An input validation error vulnerability exists in the web interface of Cisco Wireless LAN Controller Software version 8.4 and later fixed in version 8.10, which...

Cisco Wireless LAN Controller CVE-2019-15276 Denial of Service Vulnerability

Description Cisco Wireless LAN Controller is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause a restart to the device, resulting in denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCvp92098. Technologies Affected Cisco Wireles...

Wizard Spider Upgrades Ryuk Ransomware to Reach Deep into LANs

The Ryuk ransomware has added two features to enhance its effectiveness: The ability to target systems that are in “standby” or sleep mode; and the use of Address Resolution Protocol ARP pinging to find drives on a company’s LAN. Both are employed after the initial network compromise of a victim...

Cisco Wireless LAN Controller Secure Shell (SSH) Denial of Service Vulnerability (cisco-sa-20191016-wlc-ssh-dos)

According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by a denial of service DoS vulnerability in its Secure Shell SSH component due to insufficient process cleanup. An authenticated, remote attacker can exploit this issue, by repeatedly initiating SSH connections,...

Cisco Wireless LAN Controller Path Traversal Vulnerability

According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by a directory traversal vulnerability due to improper sanitization of user-supplied input in command-line parameters that describe file names. An authenticated, local attacker can exploit this to view system...

Cisco Wireless LAN Controller Software Input Validation Error Vulnerability

Cisco Wireless LAN Controller WLC Software is a suite of software for configuring and managing WLCs Wireless LAN Controllers from Cisco. An input validation error vulnerability exists in Secure Shell Session Management in Cisco WLC Software 8.5.140.0 and prior versions, which originates from the...

Cisco Aironet Access Points Plagued By Critical, High-Severity Flaws

Cisco Systems has released a security update stomping out critical and high-severity flaws impacting its Aironet access points, which are entry-level wireless access points APs used by mid-size enterprises in their offices or small warehouses. It also issued a slew of additional patches addressin...

CVE-2018-1088

A privilege escalation flaw was found in gluster snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink. Mitigation To limit exposure of gluster server nodes : 1...

Cisco Wireless LAN Controller Software Path Traversal Vulnerability

Cisco Wireless LAN Controller WLC Software is a suite of software for configuring and managing WLCs Wireless LAN Controllers from Cisco. A path traversal vulnerability exists in Cisco WLC Software versions prior to 8.10, which stems from the program's failure to properly handle user-submitted inp...