11173 matches found
Design/Logic Flaw
NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software uses an API function or data structure in a way that relies on properties that are not always guaranteed to be valid, which may lead to...
tomcat: Host name verification missing in WebSocket client
The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88...
python: NULL pointer dereference using a specially crafted X509 certificate
A null pointer dereference vulnerability was found in the certificate parsing code in Python. This causes a denial of service to applications when parsing specially crafted certificates. This vulnerability is unlikely to be triggered if application enables SSL/TLS certificate validation and accep...
McAfee ePolicy Orchestrator Insufficient Transport Layer Protection (SB10286)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by insufficient transport layer protection. The ePO Agent Handler can incorrectly revert to plain text communication with the configured SQL server. A remote, unauthenticated attacker could exploit this to view...
CVE-2017-18445
cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls SEC-249...
CVE-2019-1901 Cisco Nexus 9000 Series ACI Mode Switch Software Link Layer Discovery Protocol Buffer Overflow Vulnerability
A vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges. T...
ALPINE-CVE-2019-5058
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
OpenSSL Unspecified Vulnerability
OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. The product supports a variety of cryptographic algorithms , including symmetric ciphers , hash algorithms ,...
PT-2019-2986 · Cisco · Cisco Nexus 9000 Series
Name of the Vulnerable Software and Affected Versions: Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software versions prior to 13.27f or any 14.x release. Description: A vulnerability in the Link Layer Discovery Protocol LLDP subsystem could allow an adjacent,...
nss: PKCS#1 v1.5 signatures can be used for TLS 1.3
A vulnerability exists where it possible to force Network Security Services NSS to sign CertificateVerify with PKCS1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerabilit...
QEMU: slirp: heap buffer overflow in tcp_emu()
A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. It occurs in tcpemu routine while emulating the Identification protocol and copying message data to a socket buffer. A user or process could use this flaw to crash the QEMU process on the host...
INSIDE Secure MatrixSSL Buffer Overflow Vulnerability (CNVD-2020-22363)
INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. INSIDE Secure MatrixSSL suffers from a buffer overflow vulnerability that stems from the DTLS server not properly handling incoming network messages. An attacke...
The vulnerabilities of the microprogramming software used in Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) allow attackers to trigger a system reboot or cause a service failure.
The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD is related to incomplete verification of input data for SSL and TLS protocol headers. Exploitation of this vulnerability can allow a malicious actor to trigger ...
Siemens SIMATIC S7-300 PLC Privilege Bypass Vulnerability
The Siemens SIMATIC S7-300 CPU is a modular general-purpose controller from Siemens for the manufacturing industry. The Siemens SIMATIC S7-300 PLC module is vulnerable to an unauthorized, execute CPU attack via privilege bypass. An attacker can construct special application layer data messages th...
Imperva Blocks Our Largest DDoS L7/Brute Force Attack Ever (Peaking at 292,000 RPS)
Imagine you’re a developer building a new web application. You’ve followed all of the security best practices, hired a reputable penetration testing company before launch, and gone through extensive bug fixing to remove any vulnerabilities. However, would you be confident that your application...
CVE-2019-12222
An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9. There is an out-of-bounds read in the function SDLInvalidateMap at video/SDLpixels.c...
Akamai Load Balancing to Lock-in Quality
The Right Service from the Right Edge at the Right Time Introduction As Akamai's Global Traffic Management for Cloud, Data Centers and CDNs blog introduces, Akamai's Intelligent Edge™ platform includes DNS and Layer 7 load balancing capabilities that combine to get users to the right edge at the...
Palo Alto GlobalProtect SSL VPN Remote Code Execution Vulnerability
Palo Alto GlobalProtect SSL VPN is a popular SSLVPN product for businesses. Palo Alto GlobalProtect SSL VPN has a remote code execution vulnerability in the /sslmgr location. An attacker can exploit the vulnerability to execute task code...
