3788 matches found
curl: NTLMv2 type-3 header stack buffer overflow
A stack-based buffer overflow was found in the way curl handled NTLMv2 type-3 headers. When connecting to a remote malicious server which uses NTLM authentication, the flaw could cause curl to crash...
Microsoft Windows NTLM Tampering Security Bypass Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security vulnerability exists in Microsoft Windows. An attacker could exploit this...
CVE-2019-1040
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit...
The vulnerability of the implementation of the Security Assertion Markup Language (SAML) in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows a perpetrator to bypass the authentication process.
The vulnerability of the Security Assertion Markup Language SAML implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense is related to authentication errors when using NT LAN Manager NTLM or basic authentication. Exploiting this vulnerability allows a malicious act...
Amazon Linux 2 : kernel (ALAS-2019-1214)
A flaw was found in the Linux kernel's freescale hypervisor manager implementation. A parameter passed via to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this flaw to crash the system or corrupt memory or, possibly, create...
Input validation
Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607,...
PT-2019-2474
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. This...
Siemens SIPLUS NET CP343-1 LEAN Communications Adapter Detection
Binary data 750268.prm...
Siemens CP 343-1 Lean Communications Adapter Detection
Binary data 750239.prm...
Siemens SIPLUS NET CP343-1 Communications Adapter Detection
Binary data 750269.prm...
The vulnerability of Cisco Wireless LAN Controller’s microprogramming software, related to resource management errors, allows a intruder to cause service failure.
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
Multiple vulnerabilities in the configuration function of the administrative graphical interface of Cisco Wireless LAN Controller software allow a malicious individual to cause service failures.
Multiple vulnerabilities exist in the configuration function of the administrative graphical interface of Cisco Wireless LAN Controller microprogramming system. These vulnerabilities arise due to insufficient validation of input data. Exploitation of these vulnerabilities could allow a malicious...
The vulnerability of Cisco Wireless LAN Controller’s microprogramming software, related to resource management errors, allows a intruder to cause service failure.
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
The vulnerability of Cisco Wireless LAN Controller’s microprogramming software, related to resource management errors, allows a intruder to cause service failure.
The vulnerability of the IAPP message processor in microprogramming software for Cisco Wireless LAN Controllers is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures by sending malicious IAPP messages...
The vulnerability in the web interface of the Cisco Wireless LAN Controller allows a malicious actor to perform arbitrary actions on the device with user privileges, including changing the device’s configuration.
The vulnerability of the Cisco Wireless LAN Controller web interface is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the device with user privileges, including changing the device configuration using a...
Cisco Wireless LAN Controller Software GUI Configuration Denial of Service Vulnerabilities
According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by following vulnerability - Multiple vulnerabilities in the administrative GUI configuration feature of Cisco Wireless LAN Controller WLC Software could allow an authenticated, remote attacker to cause the devi...
Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability
According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by following vulnerability - A vulnerability in certain access control mechanisms for the Secure Shell SSH server implementation for Cisco Wireless LAN Controller WLC Software could allow an unauthenticated,...
Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability
According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by following vulnerability - A vulnerability in Locally Significant Certificate LSC management for the Cisco Wireless LAN Controller WLC could allow an authenticated, remote attacker to cause the device to...
Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabilities
According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by following multiple vulnerabilities - Multiple vulnerabilities in the handling of Inter-Access Point Protocol IAPP messages by Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, adjacen...
CVE-2019-9160
WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account allowing a remote attacker to login to the system via SSH on TCP port 22345 and escalate to root because the password for root is the WebUI admin password concatenated with a static string...