5564 matches found
Description of the security update for Outlook 2013: June 13, 2017
Description of the security update for Outlook 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
CVE-2015-3913
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service reboot via a crafted ICMP request message...
Design/Logic Flaw
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service reboot via a crafted ICMP request message...
CVE-2015-3913
CVE-2015-3913 affects Huawei Campus series switch IP stacks. According to Huawei’s advisory HWPSIRT-2015-02003, the vulnerability arises from improper handling of IP options in the IP stack when processing crafted ICMP requests, which can cause a board reboot (denial of service). Other connected ...
CVE-2015-3913
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service reboot via a crafted ICMP request message...
Belden GarrettCom Switch Detection (HTTP)
HTTP based detection of Belden GarrettCom Switches. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
The Latest on WannaCry, UIWIX, EternalRocks and ShadowBrokers
Ransomware has gained global attention over the course of the last two weeks due to the huge spread of WannaCry. Following the initial attacks, we’ve seen UIWIX, Adylkuzz and now EternalRocks come onto the scene leveraging the same core set of vulnerabilities. The common thread between the three...
Digging Into WannaCry Details: Answers to Your Burning Questions
Jimmy Graham, Director of Product Management, Qualys Threat Protection & AssetView The WannaCry ransomware attack spread so quickly and has been so disruptive that IT departments can’t get enough information about what caused it, how it can be remediated and what can be done to protect their...
Remote Denial of Service Vulnerability in Multiple Zyxel Products
ZyXEL USG50 and so on are products of ZyXEL Technology Corporation.ZyXEL USG50 is a firewall product.ZyXEL NWA3560-N is a switch product. A remote denial of service vulnerability exists in multiple Zyxel products. An attacker could exploit this vulnerability to cause high CPU consumption, resulti...
Eternal blue-advanced version struck--the eternal stone integrated 7 vulnerability-vulnerability warning-the black bar safety net
In WannaCry crazy spread towards the end of last week three 5.17 security researcher Miroslav Stampar（the Government of Croatia CERT members, Sqlmap one of the creators of in his build of SMB honeypot, the discovery of new worms is through SMB vulnerability propagation. Researcher Stampar honeypo...
The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.
The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...
The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.
The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...
The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.
The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...
The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.
The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...
NETGEAR ProSAFE Devices Detection (SNMP)
This script performs SNMP based detection of NETGEAR ProSAFE devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Using Threat Intelligence to Mitigate Wanna Decryptor (WannaCry)
Basics of Cyber Threat Intelligence Cyber Threat Intelligence is analyzed information about the opportunities, capabilities, and intent of cyber adversaries. The goal of cyber threat intelligence is to help people make decisions about how to prevent, detect, and respond to threats against their...
WannaCry: What We Know
On Friday, May 12, news agencies around the world reported that a new ransomware threat was spreading rapidly. Akamai's incident response teams and researchers worked quickly to understand this new threat and how to mitigate it. This blog post is a summary of what Akamai knows at this point...
Cisco Finally Patches 0-Day Exploit Disclosed In Wikileaks-CIA Leak
Cisco Systems has finally released an update for its IOS and IOS XE software to address a critical vulnerability, disclosed nearly two months back in the CIA Vault 7 leak, that affects more than 300 of its switch models. The company identified the vulnerability in its product while analyzing "Vau...
CVE-2017-1000358
Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDaylight odl-restconf feature contains this flaw. Version: OpenDaylight 4.0 is affected by this flaw...
CVE-2017-1000357
Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 Lithium-SR3, 3.4 Lithium-SR4, 4.0...