Denial of service

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28. A denial of service...

EulerOS Virtualization for ARM 64 3.0.1.0 : fuse (EulerOS-SA-2019-1382)

According to the version of the fuse packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in fuse. When SELinux is active, fusermount 1is vulnerable to a restriction bypass. This...

CVE-2018-19988

In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-868L Rev.B 2.05B02 devices. In the SetClientInfoDemo.php source code, the AudioMute and AudioEnble parameters are saved in the ShellPath script file without...

Toshiba PDP003Z S15 Drive Profibus Communication Option Card Detection

Binary data 757993.prm...

ABB 1SVR427032R0000 CP-E 24 2.5 Power Supply Detection

Binary data 756480.prm...

Toshiba ASD-G9ETH Ethernet IP Communications Option Module Detection

Binary data 757995.prm...

Toshiba IPE002Z S15 Drive Ethernet IP - Modbus TCP Communication Option Card Detection

Binary data 757994.prm...

SUSE SLED12 / SLES12 Security Update : audit (SUSE-SU-2019:1166-1)

This update for audit fixes the following issues : Audit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

SUSE-SU-2019:1166-1 Security update for audit

This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP3 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

Shr3dKit

This is an offensive tool for Red Team operations. The tool kit, named Shr3dKit, is a collection of scripts and tools for various stages of a Red Team engagement, including reconnaissance, weaponization, delivery, command and control, lateral movement, establishing a foothold, escalating...

UBUNTU-CVE-2019-11766

dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6OPTIONPDEXCLUDE feature...

Denial Of Service (DoS)

FreeRADIUS is vulnerable to denial of serviceDoS. A remote user can send specially crafted DHCP option 63 data to trigger a read overflow in frdhcpdecodeoptions and cause the application to crash...

Arbitrary Code Execution

kernel-rt is vulnerable to arbitrary code execution. The vulnerability exists through the UDPCORK option in a setsockopt systemcall...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the way CIPSO Common IP Security Option IP options were validated when set from user mode. A local user able to set CIPSO IP options on the socket could use this flaw to crash the system...

Use-After-Free

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

PT-2019-11719 · Jenkins · Jenkins Sitemonitor Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SiteMonitor Plugin version 0.5 and earlier Description: The issue concerns the Jenkins SiteMonitor Plugin, which unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. This means that the plugin...

CVE-2019-11594

In AdBlock before 3.45.0, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

CVE-2019-11595

In uBlock before 0.9.5.15, the $rewrite filter option allows filter-list maintainers to run arbitrary code in a client-side session when a web service loads a script for execution using XMLHttpRequest or Fetch, and the script origin has an open redirect...

WordPress Yellow Pencil Plugin Privilege Escalation

An Option Update vulnerability exists in WordPress Yellow Pencil Plugin. Successful exploitation of this vulnerability could lead to modification of any options of the affected site...

UBUNTU-CVE-2013-7470

cipsov4validate in include/net/cipsoipv4.h in the Linux kernel before 3.11.7, when CONFIGNETLABEL is disabled, allows attackers to cause a denial of service infinite loop and crash, as demonstrated by icmpsic, a different vulnerability than CVE-2013-0310...