PT-2023-5645 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Layer 2 Tunneling Protocol L2TP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS...

Cisco 多款产品安全漏洞

Cisco FXOS Software and UCS 6300 Series Fabric Interconnects are both products of Cisco, Inc. Cisco FXOS Software is a suite of firewall software that runs in Cisco security appliances.UCS 6300 Series Fabric The UCS 6300 Series Fabric Interconnects is a 6300 Series switching matrix device. A...

CVE-2023-33374

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote...

Vault.mintYieldFee FUNCTION CAN BE CALLED BY ANYONE TO MINT Vault Shares TO ANY RECIPIENT ADDRESS

Lines of code Vulnerability details Impact The Vault.mintYieldFee external function is used to mint Vault shares to the yield fee recipient. The function is an external function and can be called by anyone since there is no access control. The function will revert only under following two...

The vulnerability of the DCERPC protocol implementation in the software for managing virtual infrastructure VMware vCenter Server allows a perpetrator to execute arbitrary code.

The vulnerability of the DCERPC protocol implementation in the software for managing virtual infrastructure, VMware vCenter Server, arises due to a buffer overflow. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Lenders can lose interest

Lines of code Vulnerability details Impact The protocol can steal all interest accrued to lenders, and cannot guarantee that the lenders will receive their due interest. Proof of Concept treasuryRate determines the proportion of the interest paid to the protocol whenever interest is paid, which...

CVE-2022-35744

Windows Point-to-Point Protocol PPP Remote Code Execution Vulnerability...

CVE-2022-35753

Windows Secure Socket Tunneling Protocol SSTP Remote Code Execution Vulnerability...

CVE-2023-24510

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart...

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers allows a intruder to trigger a service failure.

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the service operation...

Dataprobe iBoot-PDU 安全漏洞

The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from the iBoot device's proprietary protocol for control and hold active commands, wher...

Incorrect setting of sqrtPriceLimitX96 in protocol

Lines of code Vulnerability details Impact The pool.swap function in the swap attempts to execute a swap. As the code below ,The sqrtPriceLimitX96 is set based on the value of projectTokenIsZero. If projectTokenIsZero is true, sqrtPriceLimitX96 is set to TickMath.MAXSQRTRATIO - 1; otherwise, it i...

Mitigation Confirmed for H-06

MITIGATION IS NOT CONFIRMED MITIGATION IS NOT CONFIRMED Mitigation of H-06: Issue not mitigated Link to Issue: code-423n4/2023-03-asymmetry-findings588 Comments Issue H-06 describes the potential problems of assuming a peg of stETH to ETH. The sponsor proposed a mitigation to fetch the price of...

The vulnerability of the IEEE 802.11 protocol lies in its ability to intercept the data transmitted by devices and replace the MAC addresses of targets, allowing attackers to perform spoofing attacks.

The vulnerability of the IEEE 802.11 protocol lies in the ability to intercept the frames transmitted by the device and to replace the MAC address of the target device. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the SLP implementation lies in the insufficient control over the amount of network messages transmitted. This allows a malicious actor, operating remotely, to cause a service failure by registering arbitrary services to create fake UDP traffic.

The vulnerability of the SLP location determination protocol is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability allows a malicious actor to cause service failures by registering arbitrary services to create fake UDP traffic...

PT-2023-36406 · Gnu +1 · Linux +1

Уязвимость реализации сетевого протокола J1939 ядра операционной системы Linux связана с повторным использованием ранее освобожденной в функции j1939 netdev start памяти в модуле net/can/j1939/main.c из-за конкурентного доступа к ndev-ml priv-j1939 priv состояние гонки. Эксплуатация уязвимости...

MGASA-2023-0154 Updated tcpdump packages fix security vulnerability

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. CVE-2023-1801...

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Layer 2 Tunneling Protocol. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

The vulnerability in the implementation of the PAPI network protocol for ArubaOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PAPI network protocol implementation in Wi-Fi wireless connectivity applications from Aruba Networks relates to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...