1384 matches found
PT-2016-3038
Name of the Vulnerable Software and Affected Versions ОВЕН ПЛК110 affected versions not specified Description The issue is related to incorrect array indexing in the programmable logic controller's embedded software. It can be exploited by a remote attacker to cause a buffer overflow denial of...
The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a malicious actor to cause malfunctions during maintenance operations.
The software of the Siemens SIMATIC S7-1200 programmable logic controller contains a vulnerability. When this vulnerability is exploited, a special SNMP packet can be sent to trigger a “failure to service” condition for the device...
The vulnerability of the enterprise automation system 1C:Enterprise, which allows a malicious individual to cause service failures
The server processes agent.exe, rmngr.exe, and rhost.exe of the enterprise automation system 1C:Enterprise use the same module rtrsrvc.dll for working with TCP connections. A specially crafted TCP packet leads to an initialization error, which in turn causes incorrect memory reading at the zero...
KLA10751 Multiple vulnerabilities in Microsoft Windows
Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or gain privileges. Below is a complete list of vulnerabilities 1. An unknown vulnerability at...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
The vulnerability of the Server sub-component in the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the operating system to become unresponsive, or in rare cases, to cause an emergency shutdown...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
The vulnerability of the Server sub-component in the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a crash or, in rare cases, cause an emergency shutdown through network packets...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
The vulnerability of the Server sub-component involves errors in the code of the MySQL database management system’s partition module. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...
dnsmasq < 2.63test1 libvirtd TCP Network Packet Parsing Response DNS Amplification DoS
The remote dnsmasq server is running a version prior to 2.63test1. It is, therefore, affected by a denial of service vulnerability in libvirtd due to improper parsing of malformed network packets. An unauthenticated, remote attacker can exploit this to cause an amplification of a large amount of...
HTTPNetworkSniffer v1.50 - Packet Sniffer Tool That Captures All HTTP Requests/Responses
HTTPNetworkSniffer is a packet sniffer tool that captures all HTTP requests/responses sent between the Web browser and the Web server and displays them in a simple table. For every HTTP request, the following information is displayed: Host Name, HTTP method GET, POST, HEAD, URL Path, User Agent,...
Debian DSA-3387-1 : openafs - security update
John Stumpo discovered that OpenAFS, a distributed file system, does not fully initialize certain network packets before transmitting them. This can lead to a disclosure of the plaintext of previously processed packets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
The vulnerability of the Firefox browser allows a perpetrator to gain access to protected information from the process’ memory.
The vulnerability of the TCP Socket API implementation in Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to protected information from the process’s memory by reading data in network packets due to...
CVE-2014-9751
CVE-2014-9751 affects the Network Time Protocol daemon (ntpd) in Linux/OS X builds of NTP 4.x prior to 4.2.8p1. The read_network_packet function fails to correctly identify IPv6 loopback (::1) sources, allowing remote attackers to spoof restricted packets and potentially disrupt or manipulate ntp...
CVE-2015-6815
The processtxdesc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service infinite loop and guest crash via unspecified vectors...
qemu -- denial of service vulnerability in e1000 NIC support
Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing transmit descriptor data when sending a network packet. A privileged user inside guest could use this flaw to...
TinySRP Buffer Overflow
Dear Fulldisclosure, I submitted the below vulnerability to the HP Zero Day Initiative. They responded that they are not interested in vulnerabilities in this "product". Further, I tried to contact one of the authors Eric A. Young; the email bounced. I am busy with my day job and do not have the...
Debian DLA-130-1 : firebird2.1 security update
Segfault in server caused by malformed network packet. See: http://tracker.firebirdsql.org/browse/CORE-4630 NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as...
Government Report Critical of FAA Security Controls
The Federal Aviation Administration has been put on notice that its information security controls are not up to par and that a risk-based program must be implemented from the ground up in order to assure the safety of its networks and passengers in the sky. A scathing Government Accounting Office...
PT-2015-4381
Name of the Vulnerable Software and Affected Versions ntp versions 4.x before 4.2.8p1 Description The issue arises from the read network packet function in ntpd not properly determining whether a source IP address is an IPv6 loopback address. This makes it easier for remote attackers to spoof...
