Fortinet FortiWAN Information Disclosure Vulnerability (CNVD-2016-07347)

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by accessing the URL /script/cfgshow.php page to obtain a backup file of the device configuration, or by...

CVE-2016-1436: Improper Restriction of Operations within the Bounds of a Memory Buffer

The General Packet Radio Switching Tunneling Protocol 1 aka GTPv1 implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers to cause a denial of service Session Manager process restart via a crafted GTPv1 packet, aka Bug ID CSCuz46198...

Cisco ASR 5000 Series Packet Data Network Gateway Denial of Service Vulnerability

Cisco ASR 5000 Series is the 5000 series of wireless controller products from Cisco.Packet Data Network Gateway aka PGW is one of the packet data gateways. A security vulnerability exists in the General Packet Radio Switching Tunneling Protocol Version 1 GTPv1 implementation of the Cisco ASR 5000...

CVE-2016-1399

The packet-processing microcode in Cisco IOS 15.22EA, 15.22EA1, 15.22EA2, and 15.24EA on Industrial Ethernet 4000 devices and 15.22EB and 15.22EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service packet data corruption via crafted IPv4 ICMP packets, aka Bug...

CVE-2016-1399

CVE-2016-1399 affects Cisco Industrial Ethernet 4000/5000 series, where packet-processing microcode can be remotely triggered by crafted IPv4 ICMP packets to cause a denial of service (packet data corruption). Affected Cisco IOS versions on IE 4000: 15.2(2)EA, 15.2(2)EA1/EA2, 15.2(4)EA; IE 5000: ...

DEBIAN-CVE-2016-2117

The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data...

CVE-2016-2117

The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data...

MGASA-2016-0126 Updated quagga packages fix security vulnerability

A vulnerability was found in a way VPNv4 NLRI parser copied packet data to the stack. Memcpy to stack data structure based on length field from packet data whose length field upper-bound was not properly checked CVE-2016-2342...

CVE-2015-7931

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

Information disclosure

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

CVE-2015-7931

The CVE-2015-7931 vulnerability affects the Adcon Telemetry A840 Telemetry Gateway Base Station, where the Java client does not authenticate the station device and lacks SSL support. This enables MITM-style spoofing and reading plaintext packet data, causing information disclosure/confidentiality...

CVE-2015-7931

The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive information by reading cleartext packet data, related to the lack of SSL support...

Information disclosure

Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data...

Eaton Form 6 control and Idea/IdeaPLUS information disclosure vulnerabilities

Eaton Form 6 control and Idea/IdeaPLUS are both products of the American company Eaton. The former is a controller product that provides instant access to operations and quickly determines the status of equipment as well as finding equipment faults, while the latter is a set of relay protection...

The vulnerability of the Firefox browser allows a perpetrator to gain access to protected information from the process’ memory.

The vulnerability of the TCP Socket API implementation in Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to protected information from the process’s memory by reading data in network packets due to...

CVE-2015-4275

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

CVE-2015-4275: Undefined Security Weakness

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

CVE-2015-4273

CVE-2015-4273 affects the Cisco ASR 5000 Series Packet Data Network Gateway (PGW) IP stack. The vulnerability arises from improper input validation of certain fields in IP packets, allowing remote, unauthenticated attackers to cause a denial of service, specifically a Session Manager outage, on d...

Cisco Packet Data Network Gateway GTPv2 Tunnel Vulnerability

A vulnerability in the GPRS Tunneling Protocol for Version 2 GTPv2 of the Cisco Packet Data Network Gateway PGW could allow an unauthenticated, remote attacker to cause partial availability of the GTPv2 service. The vulnerability is due to lack of input validation of the incoming GTPv2 packet...

CVE-2015-4273: Improper Input Validation

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...