CVE-2019-20612

An issue was discovered on Samsung mobile devices with N7.x and O8.x Broadcom Wi-Fi, and SEC Wi-Fi chipsets software. Wi-Fi allows a denial of service via TCP SYN packets. The Samsung ID is SVE-2018-13162 March 2019...

CVE-2020-9431

A memory leak was discovered in Wireshark in the LTE RRC dissector. This issue allows an attacker to trigger the flaw by injecting special packets onto the wire or by convincing a victim user into opening a malformed packet trace file...

CVE-2020-9428

An out-of-bounds read was discovered in Wireshark in the EAP dissector. An attacker can trigger the flaw by injecting special packets onto the wire or by convincing a victim user into opening a malformed packet trace file...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

PoC exploit for CVE-2020-0796 - SMBv3 RCE. The target product/service is Windows SMBv3. The vulnerability class/vector is Remote Code Execution RCE. The probable entry point is the scanner.py script, which sends a specially crafted SMB packet to the target server to check for vulnerability. Notab...

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

Cisco IOS Software Network-Based Application Recognition Denial of Service Vulnerabilities

According to its self-reported version, Cisco IOS Software is affected by following multiple vulnerabilities - Multiple vulnerabilities in the Network-Based Application Recognition NBAR feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to caus...

Mitsubishi Electric MELQIC IU1 TCP Functional Resource Management Error Vulnerability

The Mitsubishi Electric MELQIC IU1 is an IU1 series data collection analyzer from Mitsubishi Electric Mitsubishi, Japan. A resource management error vulnerability exists in the TCP function in the Mitsubishi Electric MELQIC IU1 IU1-1M20-D using firmware version 1.0.7 and earlier. The vulnerabilit...

Mitsubishi Electric MELQIC IU1 TCP Function Access Control Error Vulnerability

The Mitsubishi Electric MELQIC IU1 is an IU1 series data collection analyzer from Mitsubishi Electric Mitsubishi, Japan. An access control error vulnerability exists in the TCP function in the Mitsubishi Electric MELQIC IU1 IU1-1M20-D using firmware version 1.0.7 and earlier. The vulnerability...

Mitsubishi Electric MELQIC IU1 TCP Function Authorization Issue Vulnerability

The Mitsubishi Electric MELQIC IU1 is an IU1 series data collection analyzer from Mitsubishi Electric Mitsubishi, Japan. An authorization issue vulnerability exists in the TCP function in the Mitsubishi Electric MELQIC IU1 IU1-1M20-D using firmware version 1.0.7 and earlier. The vulnerability ste...

RICOH SP C250DN Buffer Error Vulnerability

The RICOH SP C250DN is a printer from the Japanese company Ricoh RICOH. A security vulnerability exists in the way the embedded device parses IPP packets in the Ricoh SP C250DN version 1.05. An attacker could exploit this vulnerability by means of specially crafted packets to cause the device to...

CVE-2019-14310

Ricoh SP C250DN 1.05 devices allow denial of service issue 2 of 3. Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets...

Memory corruption

Ricoh SP C250DN 1.05 devices allow denial of service issue 2 of 3. Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets...

EulerOS Virtualization for ARM 64 3.0.2.0 : avahi (EulerOS-SA-2020-1228)

According to the version of the avahi packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - avahi-daemon in Avahi through 0.6.32 inadvertently responds to IPv6 unicast queries with source addresses that are not...

Cisco IOS XR Software IPsec Packet Processor DoS (cisco-sa-iosxr-ipsec-dos-q8UPX6m)

According to its self-reported version, Cisco IOS XR Software is affected by a denial of service DoS vulnerability in the IPsec packet processor due to improper handling of packets. An unauthenticated, remote attacker can exploit this, by sending malicious ICMP error messages to an affected devic...

EulerOS Virtualization for ARM 64 3.0.2.0 : gnupg2 (EulerOS-SA-2020-1232)

According to the version of the gnupg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent...

CVE-2019-5179

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file...

Unspecified Vulnerability in WAGO PFC 200

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A security vulnerability exists in the WAGO PFC 200, which can be exploited by an attacker to send specially crafted packets to trigger the parsing of this cache file...

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center solution allows a attacker to trigger a service failure.

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center system is related to errors in processing incoming Live Data traffic. Exploiting this vulnerability can allow an attacker to cause service interruptions using...

CVE-2020-0055

In l2clinkprocessnumcompletedpkts of l2clink.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-19281

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = V2.5 and = V2.5 and = V2.5 and V20.8. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The...