15419 matches found
SUSE SLED12 / SLES12 Security Update : libssh2_org (SUSE-SU-2019:0655-1)
This update for libssh2org fixes the following issues : Security issues fixed : CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492...
SUSE SLES11 Security Update : libssh2_org (SUSE-SU-2019:13982-1)
This update for libssh2org fixes the following issues : Security issues fixed : CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492...
SUSE-SU-2019:13982-1 Security update for libssh2_org
This update for libssh2org fixes the following issues: Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets bsc1128490. - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet bsc1128492. -...
Libssh Releases Update to Patch 9 New Security Vulnerabilities
Libssh2, a popular open source client-side C library implementing the SSHv2 protocol, has released the latest version of its software to patch a total of nine security vulnerabilities. The Libssh2 library is available for all major distributors of the Linux operating systems, including Ubuntu, Re...
CVE-2019-9835
The receiver aka bridge component of Fujitsu Wireless Keyboard Set LX901 GK900 devices allows Keystroke Injection. This occurs because it accepts unencrypted 2.4 GHz packets, even though all legitimate communication uses AES encryption...
Multiple SCALANCE X switches products mirror port isolation vulnerability
SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A mirror port isolation vulnerability exists in several SCALANCE X switches products. The vulnerability is due to the monitoring barriers on the affected...
PT-2019-1601 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling requests in the Windows SMB protocol implementation, which can be exploited by a remote attacker to gain unauthorized access to protected...
The vulnerability of microprogrammed software in Siemens Simatic S7-400 programmable logic controllers is related to errors in checking input data by Ethernet, PROFIBUS, and MPI interfaces. This allows a malicious actor to trigger a service failure.
The vulnerability of microprogrammed programmable logic controllers from Siemens Simatic S7-400 is related to errors in the validation of input data by Ethernet, PROFIBUS, and MPI interfaces. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system by sending a...
eCar Insurance Coverage App Has Logic Flaw Vulnerability
eCar Insurance is a mobile Internet car insurance software application platform developed by Chengdu Zhongtong Technology Co. eCar Insurance APP has a logic flaw vulnerability, the vulnerability stems from the SMS verification code in the data return packet plaintext display, the attacker can use...
CVE-2019-1614 Cisco NX-OS Software NX-API Command Injection Vulnerability
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to incorrect input validation of user-supplied data by the NX-API subsystem. An attacker could exploit this...
Rockwell Automation RSLinx Classic Remote Code Execution (CVE-2019-6553)
A buffer overflow vulnerability exists in RSLinx Classic. This is due to a lack of input validation when handling EtherNet/IP packets. A successful exploitation of the vulnerability could to arbitrary code execution or denial of service conditions...
CVE-2019-1598
Multiple vulnerabilities in the implementation of the Lightweight Directory Access Protocol LDAP feature in Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...
PT-2019-1559 · Cisco · Nexus 7000 Series Switches +12
Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software versions prior to 2.0.1.201, 2.2.2.54, and 2.3.1.75 Cisco NX-OS Software versions prior to 7.03I71 on Nexus 3000 Series Switches Cisco NX-OS Software versions prior to 7.03I72 on Nexus 3500 Platform Switches Cisco NX-OS...
The vulnerability of Siemens’ communication module software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure of the module.
The vulnerability of Siemens’ communication module’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the module by sending specially crafted packets to port 102/TCP...
The vulnerability of the programmable logic integrated circuit that controls the input buffer of Cisco Firepower 9000 Series software-based network interfaces allows a intruder to cause a service failure.
The vulnerability of the programmable logic integrated circuit that controls the input buffer of Cisco Firepower 9000 Series software lies in the handling of various types of input packets. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service attack by sending a...
The vulnerability of Siemens’ communication module software, related to insufficient validation of input data, allows a perpetrator to trigger a service failure of the module.
The vulnerability of Siemens’ communication module’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the module by sending specially crafted packets to port 102/TCP...
Remote code execution
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'...
CVE-2019-3598
CVE-2019-3598 affects McAfee Agent (MA) 5.x where a bug in how UDP requests are processed leads to a denial of service when handling specially crafted UDP packets. The vulnerability allows remote, unauthenticated attackers to potentially cause the MA service to stop responding, reducing availabil...
Buffer overflow
Buffer Access with Incorrect Length Value in McAfee Agent MA 5.x allows remote unauthenticated users to potentially cause a denial of service via specifically crafted UDP packets...