Unauthorized Access Vulnerability in Himalaya Xiaoya Smart Speakers

Himalaya Xiaoya Smart Speaker is a smart speaker product from Himalaya. Himalaya Xiaoya Smart Speaker suffers from an unauthorized access vulnerability that allows an attacker to control the speaker to play arbitrary audio files both remotely and locally by constructing malicious dlna protocol...

Moxa IKS and EDS Uncontrolled Resource Consumption Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. An uncontrolled resource consumption vulnerability exists in the Moxa IKS and EDS series. A remote authenticated attacker could exploit this vulnerability via specially crafted packets to cause a denial of service, which coul...

The vulnerability of the SMBv2 component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SMBv2 component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by sending a specially crafted package to the SMBv2 server...

Siemens’ network software vulnerabilities, related to insufficient validation of input data, allow attackers to trigger service interruptions.

The vulnerability of Siemens network software is related to insufficient validation of input data in the Ethernet segment. Exploiting this vulnerability can allow attackers to cause failures in certain services by sending specially crafted PROFINET DCP broadcast packets...

The vulnerability of the IEC 61850-MMS protocol processor in Siemens network equipment’s microprogramming software allows a perpetrator to induce a service failure.

The vulnerability of the IEC 61850-MMS protocol processor in Siemens’ micro-programmed network equipment is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets to port...

The vulnerability of the Simatic programmable logic controller’s software, related to resource exhaustion, allows a intruder to restrict access to network connections or cause service failures.

The vulnerability of the Simatic programmable logic controller’s software is related to the exhaustion of resources during the processing of a large number of specially prepared packages. Exploiting this vulnerability can allow an intruder to restrict access to network connections or cause servic...

BusyBox Project BusyBox udhcp Option Out of Bounds Read (CVE-2018-20679)

An out-of-bounds read vulnerability has been reported in the udhcp module of BusyBox. This vulnerability is due to insufficient validation of the length of certain options in a DHCP packets. A remote attacker could exploit this vulnerability by sending maliciously crafted messages to a DHCP clien...

Cisco Firepower 9000 Series Resource Management Error Vulnerability

Cisco Firepower 9000 Series is a 9000 series firewall appliance from Cisco USA. The Cisco Firepower 9000 Series has a resource management error vulnerability that originates from a logic error in the field programmable gate array. An attacker could cause a denial of service by sending specially...

CVE-2019-1700 Cisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service Vulnerability

A vulnerability in field-programmable gate array FPGA ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module PID: FPR9K-DNM-2X100G could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition...

CVE-2019-1700 Cisco Firepower 9000 Series Firepower 2-Port 100G Double-Width Network Module Queue Wedge Denial of Service Vulnerability

A vulnerability in field-programmable gate array FPGA ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module PID: FPR9K-DNM-2X100G could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition...

Security Bulletin: IBM MQ Appliance is affected by a kernel vulnerability (CVE-2018-5391)

Summary IBM MQ Appliance has addressed the following kernel vulnerability. Vulnerability Details CVEID: CVE-2018-5391 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by the improper handling of the reassembly of fragmented IPv4 and IPv6 packets by the IP implementation. By...

Windows DHCP Server Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, an attacker could send...

KLA11418 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerabili...

CVE-2019-7732

In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field username, realm, nonce, uri, or response, only the last instance can ever be freed...

The vulnerability of Siemens’ PROFINET DCP software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of Siemens’ PROFINET DCP software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures in the local Ethernet segment using specially crafted PROFINET DCP broadcast packets...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to become unresponsive or to crash. This occurs through the use of...

Vulnerability of the Server component: The MySQL Server database management system’s Parser component, which allows a hacker to cause a service failure.

The vulnerability of the Server:Parser component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the application to become unresponsive or to crash due to specially crafte...

Vulnerability of the Server component: The MySQL Server database management system’s Parser component, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to become unresponsive or to crash, by using specially crafted network packe...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to become unresponsive or to crash. This occurs through the use of...

Vulnerability of the Server component: The MySQL Server database management system’s Parser component, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause the application to become unresponsive or to crash, by using specially crafted network packets...