3590 matches found
CVE-2018-0372
A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service DoS condition on an affect...
CVE-2018-11543
A Local File Inclusion LFI vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects...
1000 Guess has an unspecified vulnerability
1000 Guess is an ethereum-based random number guessing game. A security vulnerability in the 'addguess' function of the implementation of the simplelottery smart contract in 1000 Guess stems from the program's use of publicly readable variables to generate random values. An attacker could exploit...
Cisco Nexus 4000 Series Switch NX-OS Input Validation Vulnerability
The Cisco Nexus 4000 Series Switch is a 4000 series switch product from Cisco USA.NX-OS is a set of data center-grade operating system software used by the switches running in it. An input validation vulnerability exists in the Simple Network Management Protocol SNMP feature of NX-OS on the Cisco...
Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance Path Traversal Vulnerability
The Cisco Firepower 4100 Series Next-Generation Firewall NGFW and the Firepower 9300 Security Appliance are both products of Cisco Corporation.The Cisco Firepower 4100 Series The Cisco Firepower 4100 Series Next-Generation Firewall NGFW is a 4100-series firewall product, and the Firepower 9300...
June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4291497)
June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 8.1, RT 8.1, and Server 2012 R2 KB 4291497 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and...
UBUNTU-CVE-2017-16114
The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds...
Google Android MediaTek component elevation of privilege vulnerability (CNVD-2018-13160)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...
CVE-2009-20004
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/galanfileformatbof.rb 2025-08-22 00:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwx76fgmoa22 2025-10-...
FBI seizes control of a massive botnet that infected over 500,000 routers
Shortly after Cisco's released its early report on a large-scale hacking campaign that infected over half a million routers and network storage devices worldwide, the United States government announced the takedown of a key internet domain used for the attack. Yesterday we reported about a piece ...
Moxa EDR-810 Denial of Service Vulnerability (CNVD-2018-11729)
The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A denial of service vulnerability exists in the service proxy feature of the Moxa EDR-810 V4.1 build 17030317. An attacker can exploit this vulnerability b...
PT-2018-5639 · Moxa · Moxa Edr-810
Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the Service Agent functionality, allowing an attacker to cause a denial of service by sending a specially crafted packet. The attacker can trigger this...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-10431)
Microsoft Office 2010 SP2 and others are products of Microsoft Corporation.Microsoft Office 2010 SP2 is an office software suite product.Word 2007 SP3 is a word processing software. A remote code execution vulnerability exists in Microsoft Office that stems from the program failing to properly...
CVE-2018-0273
A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router ASR 5000 Series Routers and Virtualized Packet Core VPC System Software could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being...
Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-07984)
Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. An informatio...
CVE-2018-1038
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...
Convenience rollup update for Windows 7 SP1 and Windows Server 2008 R2 SP1
Convenience rollup update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Introduction This article describes a convenience rollup for Windows 7 Service Pack 1 SP1-based and Windows Server 2008 R2 SP1-based computers. This rollup package includes most updates that were released after the release...
thousand-islands-real-estate.com XSS vulnerability
Open Bug Bounty ID: OBB-592386 Description| Value ---|--- Affected Website:| thousand-islands-real-estate.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....
