CVE-2016-6553: Undefined Security Weakness

Nuuo NT-4040 Titan, firmware NT-404001.07.0000.00151120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulnerable device...

CVE-2016-6551: Undefined Security Weakness

Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device...

Code injection

Bitcoin Core before v0.13.0 allows denial of service memory exhaustion triggered by the remote network alert system deprecated since Q1 2016 if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects othe...

CVE-2016-10724

Bitcoin Core before v0.13.0 allows denial of service memory exhaustion triggered by the remote network alert system deprecated since Q1 2016 if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects othe...

CVE-2016-10725

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" which is supposed to override all other alerts because operations occur in the wrong order. This behavior occurs in the remote network alert system deprecated since Q1 2016. This affects other uses of the...

CVE-2016-10724

Bitcoin Core before v0.13.0 allows denial of service memory exhaustion triggered by the remote network alert system deprecated since Q1 2016 if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects othe...

CVE-2016-10725

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" which is supposed to override all other alerts because operations occur in the wrong order. This behavior occurs in the remote network alert system deprecated since Q1 2016. This affects other uses of the...

CVE-2016-10724

Bitcoin Core before v0.13.0 allows denial of service memory exhaustion triggered by the remote network alert system deprecated since Q1 2016 if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects othe...

CVE-2016-10725

In Bitcoin Core before v0.13.0, a non-final alert can block the final alert because operations occur in the wrong order. This affects the remote network alert system (deprecated since Q1 2016) and extends to other code paths such as Bitcoin Knots before v0.13.0.knots20160814 and many altcoins. Th...

CVE-2016-10724

Removed by vendor...

CVE-2016-10725

Removed by vendor...

CVE-2016-10725

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" which is supposed to override all other alerts because operations occur in the wrong order. This behavior occurs in the remote network alert system deprecated since Q1 2016. This affects other uses of the...

CVE-2016-10725

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" which is supposed to override all other alerts because operations occur in the wrong order. This behavior occurs in the remote network alert system deprecated since Q1 2016. This affects other uses of the...

CVE-2016-10724: Uncontrolled Resource Consumption

Bitcoin Core before v0.13.0 allows denial of service memory exhaustion triggered by the remote network alert system deprecated since Q1 2016 if an attacker can sign a message with a certain private key that had been known by unintended actors, because of an infinitely sized map. This affects othe...

CVE-2016-10725: Undefined Security Weakness

In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" which is supposed to override all other alerts because operations occur in the wrong order. This behavior occurs in the remote network alert system deprecated since Q1 2016. This affects other uses of the...

CVE-2018-10596: Improper Restriction of Communication Channel to Intended Endpoints

Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encapsulated IP-based VPN connection to a...

Security Bulletin: Denial of Service when using e-community single sign on in IBM Security Access Manager for Web (CVE-2014-4809)

Summary When using e-community single sign on ECSSO, the WebSEAL component of IBM Security Access Manager for Web could become unresponsive under certain circumstances, possibly resulting in denial of service. Vulnerability Details CVE ID: CVE-2014-4809 DESCRIPTION: When configured to use...

CVE-2018-2857

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

UBUNTU-CVE-2018-2839

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-0019: Improper Input Validation

A vulnerability in Junos OS SNMP MIB-II subagent daemon mib2d may allow a remote network based attacker to cause the mib2d process to crash resulting in a denial of service condition DoS for the SNMP subsystem. While a mib2d process crash can disrupt the network monitoring via SNMP, it does not...