The vulnerability of the DIGSI 5 software and SIPROTEC 5 devices, which stems from insufficient validation of input data, allows attackers to trigger service interruptions.

The vulnerability of the DIGSI 5 software and the SIPROTEC 5 devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets to port 443/TCP...

The vulnerabilities of Siemens’ software and hardware infrastructure, related to errors in processing a large number of UDP packets, allow attackers to trigger service interruptions.

The vulnerability of Siemens’ software and hardware infrastructure is related to errors in processing a large number of UDP packets. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

GOG Galaxy elevation of privilege vulnerability (CNVD-2020-02829)

GOG Galaxy is a game client program. The program is used to install, launch and update games. An elevation of privilege vulnerability exists in the GalaxyClientService installed by GOG Galaxy, which stems from faulty access control. An attacker can exploit this vulnerability by sending...

CVE-2019-15511

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is...

CVE-2015-1606

The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...

DEBIAN-CVE-2015-1606

The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...

Cisco IOS XE Software Autonomic Control Plane Channel Information Disclosure (cisco-sa-20170726-aniacp)

According to its self-reported version, Cisco IOS XE Software is affected by an information disclosure vulnerability in the Autonomic Networking feature due to unknown reasons. An unauthenticated, adjacent attacker can exploit this by capturing and replaying Autonomic Control Plane ACP packets th...

Cisco IOS Autonomic Control Plane Channel Information Disclosure (cisco-sa-20170726-aniacp)

According to its self-reported version, Cisco IOS is affected by an information disclosure vulnerability in the Autonomic Networking feature due to unknown reasons. An unauthenticated, adjacent attacker can exploit this by capturing and replaying Autonomic Control Plane ACP packets that are...

CVE-2019-13581

An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitra...

Heap overflow

An issue was discovered in Marvell 88W8688 Wi-Fi firmware before version p52, as used on Tesla Model S/X vehicles manufactured before March 2018, via the Parrot Faurecia Automotive FC6050W module. A heap-based buffer overflow allows remote attackers to cause a denial of service or execute arbitra...

CVE-2019-16110

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

The vulnerability in the implementation of the interaction protocol between the “ARM Reliezer” software and the “Communication Server” software of the EKRASMS-SP software suite allows a violator to modify the list of servers.

The vulnerability of the interaction protocol between the “ARM Rielshchika” software and the “Server Connect” software of the EKRASMS-SP suite lies in the absence of authentication in the mechanism for extending the list of servers. Exploiting this vulnerability allows a malicious actor to modify...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2019-41477)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in Juniper Networks Junos OS. The vulnerability originates from a network...

Unspecified Vulnerability in Siemens Mentor Nucleus Networking Module

Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for scalability and reliability in systems spanning the range of aerospace, industrial and medical applications. A security vulnerability exists in the Siemens Mentor Nucleus Networking Module. An attack...

CVE-2017-17224

Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206C00E205R3P1 have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal...

Cisco IOS XE Software IP Detail Record DoS (cisco-sa-20160928-ipdr)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the IP Detail Record IPDR due to improper handling of IPDR packets. An unauthenticated, remote attacker can exploit this, by sending crafted IPDR packets, to cause the device to...

Cisco IOS XE Software NAT DoS (cisco-sa-20160928-esp-nat)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the implementation of Network Address Translation NAT functionality due to improper handling of malformed ICMP packets by the affected software. An unauthenticated, remote attacke...

PT-2019-3956

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description The issue is related to an information disclosure problem in the Windows TCP/IP stack, specifically with how it handles IPv6 flowlabel filled packets. This could allow a remote attacke...

The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.

The vulnerability of TP-Link TL-WR840N router’s microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure through fragmented packets...

Valve: [Portal 2] Remote Code Execution via voice packets

Description RCE can be achieved on other players via voice packets due to the lack of length validation when reading into a stack based buffer. POC 1. As the victim, invite the attacker into a game. 2. Wait until both players have loaded into the game. 3. Inject the following DLL into the attacke...