Gryphon Tower Command Injection Vulnerability (CNVD-2021-100344)

The Gryphon Tower is a wireless router from Gryphon. A command injection vulnerability exists in Gryphon Tower, which originates from the failure of the parameters of operation 3 in the controllerserver service on the router to correctly filter special characters, commands, etc. entered by the...

Wireshark Bluetooth HCI_ISO DoS

The vulnerability of the Bluetooth HCIISO traffic analyzer service in Wireshark is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to cause a service failure by injecting specially created packets...

Mitsubishi Electric Got has a vulnerability in input validation.

Mitsubishi Electric Got is an HMI touchscreen from Mitsubishi Electric Japan. An input validation error vulnerability exists in Mitsubishi Electric GOT, which can be exploited by an attacker to send malicious packets to rewrite the device and adversely affect the operation of the system...

Dahua IPC Authentication Bypass Vulnerability (CNVD-2021-103420)

The Dahua IPC is a series of industrial controls from Dahua, a Chinese company. An authentication bypass vulnerability exists in the Dahua IPC, which can be exploited by an attacker to bypass device authentication by constructing malicious packets...

Dahua IPC Authentication Bypass Vulnerability

The Dahua IPC is a series of industrial controls from Dahua, a Chinese company. An authentication bypass vulnerability exists in the Dahua IPC, which can be exploited by an attacker to bypass device authentication by constructing malicious packets...

Dahua IPC authorization issue vulnerability

The Dahua IPC is a series of industrial controls from Dahua, a Chinese company. An authentication bypass vulnerability exists in the Dahua IPC, which can be exploited by an attacker to bypass device authentication by constructing malicious packets...

Dahua IPC authorization issue vulnerability

The Dahua IPC is a series of industrial controls from Dahua, a Chinese company. An authentication bypass vulnerability exists in the Dahua IPC, which can be exploited by an attacker to bypass device authentication by constructing malicious packets...

Cisco NX-OS Software Denial of Service Vulnerability (CNVD-2021-68723)

A denial-of-service vulnerability exists in the MPLS OAM feature of Cisco NX-OS Software, which can be exploited by an attacker by sending malicious MPLS echo requests or echo reply packets to cause the MPLS OAM process to crash and restart multiple times...

CVE-2021-38598

OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch c...

Cisco Adaptive Security Appliance Software Release 7.0.0 IPsec DoS (cisco-sa-asa-ftd-ipsec-dos-TFKQbgWC)

A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...

Rockwell Automation RSLinx Classic Denial of Service Vulnerability (CNVD-2021-05087)

Rockwell Automation RSLinx Classic is a suite of industrial communication solutions from Rockwell Automation. The solution supports access to RockwellSoftware, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A denial of service vulnerability exists in Rockwell...

Denial Of Service (DoS)

atftpd is vulnerable to denial of service. An attacker is able to inject a specially crafted sequence of RRQ-Multicast to requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger this vulnerability...

CVE-2020-9094

There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message properly. Attackers can exploit this vulnerability by sending malicious packet. This can lead to denial of service...

PT-2020-20488

Name of the Vulnerable Software and Affected Versions Huawei CloudEngine affected versions not specified Description The issue is related to an out of bound read vulnerability. A module in the product does not handle specific messages properly, allowing attackers to exploit this by sending...

Denial Of Service (DoS)

ntpd is vulnerable to denial of service. A remote attacker is able to cause a denial of service memory consumption by sending malicious packets due to memory not bring freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. A use after free vulnerability in ipreass in ipinput.c of libslirp allows an attacker to crash the application using malicious packets...

DEBIAN-CVE-2020-6097

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

CVE-2020-6097

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

Denial of service

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

spice: Arbitrary code execution

Background Provides a complete open source solution for remote access to virtual machines in a seamless way so you can play videos, record audio, share USB devices, and share folders without complications. Description A flaw in spice’s memory handling code has been discovered, allowing an out of...