CVE-2018-4002

An exploitable denial-of-service vulnerability exists in the mdnscap binary of the CUJO Smart Firewall running firmware 7003. When parsing labels in mDNS packets, the firewall unsafely handles label compression pointers, leading to an uncontrolled recursion that eventually exhausts the stack,...

PT-2019-10742 · Cujo · Cujo Smart Firewall

Name of the Vulnerable Software and Affected Versions: CUJO Smart Firewall version 7003 Description: A denial-of-service issue exists due to unsafe handling of label compression pointers in mDNS packets by the mdnscap binary, leading to uncontrolled recursion and eventual stack exhaustion, causin...

CVE-2010-0747

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...

CVE-2010-0747

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...

Design/Logic Flaw

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...

CVE-2010-0747

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...

CVE-2010-0747

CVE-2010-0747 affects DRBD8. Local users can bypass intended restrictions via crafted netlink packets, allowing potential privilege escalation similar to CVE-2009-3725. The linked references indicate a local, low-complexity access bypass without remote code execution details. No explicit patch/ve...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to the failure to take measures to neutralize special elements. This vulnerability allows a violator to unauthorizedly intercept and modify software update packets.

The vulnerability of the ZingBox Inspector network traffic handler exists because special elements are not properly neutralized. Exploiting this vulnerability allows a malicious actor to intercept and modify software update packets remotely and without authorization...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to insufficient validation of input data. This allows unauthorized attackers to intercept and modify software update packets.

The vulnerability of the ZingBox Inspector network traffic processor exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to intercept and modify software update packets remotely without authorization...

Vulnerability of systems for data collection and process control in Schneider Electric’s industrial automation systems such as StruxureWare SCADA Expert, Vijeo Citect, CitectSCADA, StruxureWare PowerSCADA Expert, and PowerLogic SCADA. This vulnerability stems from improper handling of exceptions, allowing attackers to trigger service failures.

The vulnerabilities of systems for data collection and process control in Schneider Electric’s StruxureWare SCADA Expert, Vijeo Citect, Vijeo Citect, CitectSCADA, StruxureWare PowerSCADA Expert, and PowerLogic SCADA systems are related to improper handling of exceptions. Exploiting these...

MGASA-2019-0299 Updated bind packages fix security vulnerabilities

Updated bind packages fix security vulnerabilities Limiting simultaneous TCP clients is ineffective CVE-2018-5743 Race condition when discarding malformed packets can cause bind to exit with assertion failure CVE-2019-6471 In addition to those two security issues, this package releases also fixes...

Fujitsu Wireless Keyboard Plagued By Unpatched Flaws

Two high-severity flaws, discovered in a popular Fujitsu wireless keyboard set, could allow attackers from a short distance away to “eavesdrop” on passwords entered into the keyboards, or even fully takeover a victim’s system. Making matters worse, the impacted Fujitsu wireless keyboard LX390...

The vulnerability of the Profinet software driver for automation and control systems in industrial processes, allowing a intruder to trigger a service failure.

The vulnerability of the Profinet software driver for automation and control systems in industrial processes involves division by zero errors. Exploiting this vulnerability could allow a malicious actor to trigger service failures by sending specially crafted DCP packets...

Cisco IOS Software IP Service Level Agreement Denial of Service Vulnerability

According to its self-reported version, Cisco IOS Software is affected by a vulnerability in the processing of IP Service Level Agreement SLA packets by Cisco IOS Software and Cisco IOS software, which could allow an unauthenticated, remote attacker to cause an interface wedge and an eventual...

The vulnerability of Junos OS router devices of the SRX Series arises from insufficient validation of input data. This allows attackers to trigger service interruptions.

The vulnerability of Junos OS router devices of the SRX Series exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted multi-address packets...

The vulnerability of the Next-Generation Multicast VPN (NG-mVPN) service in the Junos OS allows a attacker to cause a service failure.

The vulnerability of the Next-Generation Multicast VPN NG-mVPN service in the Junos OS operating system is related to the lack of data validation during transmission. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IPv4 packets...

The vulnerability of the Junos OS router of the SRX 5000 Series allows a hacker to cause a service failure.

The vulnerability of the Junos OS router on the SRX 5000 Series is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted TCP packets remotely...

The vulnerability of the Routing Engine component of the Junos OS operating system, which allows a hacker to trigger a service failure

The vulnerability of the Routing Engine component of the Junos OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted IPv6 packets...

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers allows a attacker to cause a service failure.

The vulnerability of the SIP ALG application-level gateway on Junos OS MX Series routers stems from resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libssh2 Multiple Vulnerabilities (NS-SA-2019-0205)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libssh2 packages installed that are affected by multiple vulnerabilities: - An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attack...