Lucene search
+L

2011 matches found

Richard Bejtlich's blog
Richard Bejtlich's blog
added 2019/05/09 2:30 p.m.152 views

Dissecting Weird Packets

I was investigating traffic in my home lab yesterday, and noticed that about 1% of the traffic was weird. Before I describe the weird, let me show you a normal frame for comparison's sake. This is a normal frame with Ethernet II encapsulation. It begins with 6 bytes of the destination MAC address...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.8 views

Siemens Multiple Products Improper Input Validation

Binary data 720144.prm...

6.5CVSS7AI score0.00547EPSS
SaveExploits0References2
CVE
CVE
added 2019/04/23 6:16 p.m.50 views

CVE-2018-3312

The CVE-2018-3312 entry applies to Oracle Retail Customer Engagement (Segment) in Oracle Retail Applications, affecting versions 16.0 and 17.0. The vulnerability is described as exploitable by a high-privileged attacker with network access via HTTP, potentially enabling unauthorized creation, del...

6CVSS5.1AI score0.00875EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/04/17 12:0 a.m.8 views

Oracle Retail Applications Retail Customer Engagement Access Control Error Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation. The product includes inventory management, sales management and customer management, etc. Retail Customer Engagement is one of the retailer customer engagement components, mainly used to interact...

6CVSS6.6AI score0.00875EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/03/06 4:0 p.m.109 views

Action Recommended to Secure the Cisco Nexus PowerOn Auto Provisioning Feature

Cisco Nexus devices support an automatic provisioning or zero-touch deployment feature called PowerOn Auto Provisioning POAP. This feature assists in automating the initial deployment and configuration of Nexus switches. POAP is enabled by default and activates on devices that have no startup...

0.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.6 views

Siemens’ network software vulnerabilities, related to insufficient validation of input data, allow attackers to trigger service interruptions.

The vulnerability of Siemens network software is related to insufficient validation of input data in the Ethernet segment. Exploiting this vulnerability can allow attackers to cause failures in certain services by sending specially crafted PROFINET DCP broadcast packets...

6.5CVSS6.5AI score0.00469EPSS
SaveExploits0References3Affected Software8
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.9 views

The vulnerability of the elf_parse_notes function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the elfparsenotes function in the GNU Binutils development toolset is related to errors in accessing data beyond the specified buffer. Exploiting this vulnerability could allow a malicious actor to cause service failures by using an ELF file with a NOTES segment having a larg...

5.5CVSS6.6AI score0.02167EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:0 a.m.7 views

The vulnerability of the `assign_file_positions_for_non_load_sections` function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the assignfilepositionsfornonloadsections function in the GNU Binutils development environment is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by using an ELF file with a RELRO segment that lacks...

5.5CVSS6.4AI score0.01508EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.26 views

The vulnerability of Siemens’ PROFINET DCP software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of Siemens’ PROFINET DCP software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures in the local Ethernet segment using specially crafted PROFINET DCP packets...

6.5CVSS6.9AI score0.00906EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2019/01/29 12:29 a.m.3 views

DEBIAN-CVE-2019-7149

A heap-based buffer over-read was discovered in the function readsrclines in dwarfgetsrclines.c in libdw in elfutils 0.175. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by eu-nm...

6.5CVSS7AI score0.02212EPSS
SaveExploits1References1
MariaDBUnix
MariaDBUnix
added 2019/01/16 7:0 p.m.36 views

CVE-2019-2503

Disclaimer: This data contains information about vulnerable...

6.4CVSS7.9AI score0.02487EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2019/01/16 12:0 a.m.40 views

CVE-2019-2503

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection Handling. Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access to the physical...

6.4CVSS6.7AI score0.02487EPSS
SaveExploits0References3
Veracode
Veracode
added 2019/01/15 9:3 a.m.31 views

Privilege Escalation

kernel-rt is vulnerable to privilege escalation attacks. The vulnerability exists as arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET...

7.8CVSS7.4AI score0.01447EPSS
SaveExploits8References25Affected Software1
NVD
NVD
added 2019/01/09 11:29 p.m.16 views

CVE-2018-16197

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on the affected device...

6.5CVSS6.4AI score0.00503EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/09 11:29 p.m.18 views

CVE-2018-16198

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker on the same network segment to access a non-documented developer screen to perform operations on the affected device...

8.8CVSS8.6AI score0.0047EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/09 11:29 p.m.20 views

CVE-2018-16200

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands...

8.8CVSS8.9AI score0.0065EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/09 11:29 p.m.23 views

CVE-2018-16195

Aterm WF1200CR and Aterm WG1200CR Aterm WF1200CR firmware Ver1.1.1 and earlier, Aterm WG1200CR firmware Ver1.0.1 and earlier allows an attacker on the same network segment to execute arbitrary OS commands via SOAP interface of UPnP...

8.8CVSS9AI score0.00729EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/09 11:29 p.m.16 views

CVE-2018-0678

Buffer overflow in BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to execute arbitrary code via unspecified vectors...

6.8CVSS7.1AI score0.0112EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/09 11:29 p.m.6 views

CVE-2018-0676

BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors...

8.8CVSS6AI score0.00617EPSS
SaveExploits0References2
NVD
NVD
added 2019/01/09 11:29 p.m.20 views

CVE-2018-0677

BN-SDWBP3 firmware version 1.0.9 and earlier allows attacker with administrator rights on the same network segment to execute arbitrary OS commands via unspecified vectors...

7.7CVSS6.9AI score0.00599EPSS
SaveExploits0References2
Rows per page
Query Builder