Kernel Vulnerabilities

The kernel in use by the Management Plane of PAN-OS is vulnerable to CVE-2015-5364 and CVE-2015-5366. Ref PAN-52379/87408 The CVSS Score of CVE-2015-5364 is 7.8, High; while the CVSS Score of CVE-2015-5366 is 5.0, Medium. Those could lead to a Denial of Service attack. This issue affects PAN-OS...

Kernel Vulnerabilities

The kernel in use by the Management Plane of PAN-OS is vulnerable to CVE-2015-5364 and CVE-2015-5366. Ref PAN-52379/87408...

CVE-2016-6355

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

CVE-2016-6355: Undefined Security Weakness

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

Security Advisory 0023

Security Advisory 0023 PDF Date: August 15th, 2016 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | August 15th, 2016 | Initial release 1.1 | September 15th, 2016 | Updated to include fixed software versions Arista Products vulnerability report for security vulnerability CVE-2016-5696 that...

Cisco IOS XR Software for Cisco ASR 9001 Aggregation Services Routers Fragmented Packet Denial of Service Vulnerability

A vulnerability in the driver processing functions of Cisco IOS XR Software for Cisco ASR 9001 Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a memory leak on the route processor RP of an affected device, which could cause the device to drop all control-plan...

CVE-2016-6178

Huawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with software before V800R007SPH019; NE5000E devices with software before V800R006SPH018; and CloudEngine devices 12800 with software before V100R003SPH010 and V100R005 before V100R005SPH006 allow remote...

Adobe Flash - JXR Processing Double-Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=788 There is a heap overflow when loading the attacked JXR file in Adobe Flash. To reproduce, load the attached file using LoadImage.swf?img=12.atf. This issue can be a bit difficult to reproduce, as the crash occurs when the playe...

Palo Alto Networks PAN-OS 7.0.7 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the passive firewall where a VM-series ESXi configuration processes and forwards traffic. No other details are available. - An unspecified...

F5 BIG-IP - TCP vulnerability CVE-2015-8099

Under limited conditions, an invalid TCP segment can lead to a Denial of Service for the High-Speed Bridge HSB on the following platforms: 3900, 6900, 8900, 8950, 11000, 11050, PB100 or PB200. This issue is only exposed on virtual servers while Software SYN cookies are configured for use and...

F5 Networks BIG-IP : TCP vulnerability (K35358312)

Under limited conditions, an invalid TCP segment can lead to a Denial of Service for the High-Speed Bridge HSB on the following platforms: 3900, 6900, 8900, 8950, 11000, 11050, PB100 or PB200. This issue is only exposed on virtual servers while Software SYN cookies are configured for use and...

Cargo Plane Car Transporter - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Cargo Plane Car Transporter published at the 'play' market has multiple vulnerabilities...

RC-AirSim - RC Model Plane Sim - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application RC-AirSim - RC Model Plane Sim published at the 'play' market has multiple vulnerabilities...

Cargo Plane City Airport - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Cargo Plane City Airport published at the 'play' market has multiple vulnerabilities...

Airport Plane Rescue 911 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Airport Plane Rescue 911 published at the 'play' market has multiple vulnerabilities...

X-Plane 10 Flight Simulator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application X-Plane 10 Flight Simulator published at the 'play' market has multiple vulnerabilities...

Transporter Plane 3D - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Transporter Plane 3D published at the 'play' market has multiple vulnerabilities...

Stickman Plane - SQLite database found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Stickman Plane published at the 'play' market has multiple vulnerabilities...

Plane Simulator 3D - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Plane Simulator 3D published at the 'play' market has multiple vulnerabilities...

Plane Finder Free - Dangerous filesystem permissions, GPL license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Plane Finder Free published at the 'play' market has multiple vulnerabilities...