The vulnerability of the Libraries component in Java SE, Java SE Embedded, and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to create, delete, or alter access to critical data.

The vulnerability of the Libraries component in Java SE, Java SE Embedded, and Oracle GraalVM Enterprise Edition software platforms exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to create, delete, or alter access to critical data using netwo...

The vulnerability of the Pre Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to modify data or gain privileged access.

The vulnerability of the Pre Login component of the Oracle FLEXCUBE Direct Banking system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain privileged access using network packets...

Cisco NX-OS Software Unidirectional Link Detection DoS / Code Execution (cisco-sa-nxos-udld-rce-xetH6w35)

An arbitrary code execution or denial of service DoS vulnerability exists in Unidirectional Link Detection UDLD feature of Cisco NX-OS Software due to insufficient input validation. An unauthenticated, adjacent attacker can exploit this issue by sending crafted Cisco UDLD protocol packets to a...

kernel: remote DoS in TIPC kernel module

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization...

kernel: remote DoS in TIPC kernel module

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization...

unbound: assertion failure and denial of service in dname_pkt_copy via an invalid packet

A flaw was found in unbound. A reachable assertion in the dnamepktcopy function can be triggered by sending invalid packets to the server. The highest threat from this vulnerability is to service availability...

unbound: assertion failure and denial of service in synth_cname

A flaw was found in unbound. A reachable assertion in the synthcname function can be triggered by sending invalid packets to the server. If asserts are disabled during compilation, this issue might lead to an out-of-bounds write in dnamepktcopy function. The highest threat from this vulnerability...

CVE-2002-2438

TCP firewalls could be circumvented by sending a SYN Packets with other flags like e.g. RST flag set, which was not correctly discarded by the Linux TCP stack after firewalling...

CVE-2002-2438

TCP firewalls could be circumvented by sending a SYN Packets with other flags like e.g. RST flag set, which was not correctly discarded by the Linux TCP stack after firewalling...

PT-2021-8285 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue allows TCP firewalls to be circumvented by sending SYN packets with other flags set, such as the RST flag, which is not correctly discarded by the Linux TCP stack after firewalling...

MikroTik RouterOS Assertion Failure Vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS suffers from an assertion failure vulnerability in the btest process. An authenticated, remote...

[SECURITY] Fedora 33 Update: python-impacket-0.9.22-3.fc33

Impacket is a collection of Python classes focused on providing access to network packets. Impacket allows Python developers to craft and decode netw ork packets in simple and consistent manner. It is highly effective when used in conjunction with a packet capture utility or package such as Pcapy...

[SECURITY] Fedora 34 Update: python-impacket-0.9.22-3.fc34

Impacket is a collection of Python classes focused on providing access to network packets. Impacket allows Python developers to craft and decode netw ork packets in simple and consistent manner. It is highly effective when used in conjunction with a packet capture utility or package such as Pcapy...

[SECURITY] Fedora 32 Update: python-impacket-0.9.22-3.fc32

Impacket is a collection of Python classes focused on providing access to network packets. Impacket allows Python developers to craft and decode netw ork packets in simple and consistent manner. It is highly effective when used in conjunction with a packet capture utility or package such as Pcapy...

WAGO Unauthorized Access Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in WAGO. The vulnerability arises from unauthorized acces...

CVE-2021-20998

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

CVE-2021-20998

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

Authorization

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

CVE-2021-20998 WAGO: Managed Switches: Unauthorized creation of user accounts

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

FragAttack: New Wi-Fi vulnerabilities that affect… basically everything

A new set of vulnerabilities with an aggressive name and their own website almost always bodes ill. The name FragAttack is a contraction of fragmentation and aggregation attacks, which immediately indicates the main area where the vulnerabilities were found. The vulnerabilities are mostly in how...