CVE-2015-5784

creationtimestamp| type| source ---|---|--- 2015-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38137...

CVE-2015-3704

creationtimestamp| type| source ---|---|--- 2015-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38138...

jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Cisco ASR 1000 Series Router IP Message Handling Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of IP v4 and IPv6 messages that allows a remote attacker to...

Cisco IOS XR for ASR 9000 Series Router Message Processing Target BGP Service Denial Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. A security vulnerability in the Cisco ASR 9000 series routers allows a remote user to send specially crafted BGPv4 messages, resulting in device processing errors tha...

Cisco Application Policy Infrastructure Controllers and Nexus 9000 Series ACI Mode Switches Unauthorized Access Vulnerability

Cisco Application Policy Infrastructure is a controller that automates the management of application-centric infrastructures.Cisco Nexus 9000 Series ACI Mode Switches The Cisco Nexus 9000 Series ACI Mode Switches are 9000 series switches for application-centric infrastructure ACI. An unauthorized...

Siemens SIPROTEC 4 Denial of Service Vulnerability

SIPROTEC 4 and SIPROTEC devices offer a wide range of integrated protection, control, measurement and power substation automation functions; EN100 modules are used to implement IEC 61850 communication. SIPROTEC 4 has been disclosed to have a denial of service vulnerability, which can be exploited...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2015-04630)

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold R2,Windows RT Gold 8.1, which allows local users to...

Cisco Nexus 7000 Device Local Elevation of Privilege Vulnerability

The Cisco Nexus 7000 Series switches help create the network infrastructure platform needed for next-generation unified array data centers. Multiple elevation of privilege vulnerabilities exist in the Python scripting subsystem on Cisco Nexus 7000 devices configured with multiple VDCs, which can ...

GarrettCom Magnum 6K and 10K Switches Remote Denial of Service Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in the GarrettCom Magnum 6K and 10K Switches that allows remote attackers to exploit the vulnerability by submitting a special request to reload the device, resulting in a denial of...

Cisco ASR 9000 IOS XR Resource Management Error Vulnerability

Cisco IOS XR on ASR 9000 is a set of operating systems from Cisco that run in the 9000 series router devices. A security vulnerability exists in Cisco IOS XR version 5.3.1 for Cisco ASR 9000 devices. A remote attacker can exploit this vulnerability to cause a denial of service NPU chip reset or...

Cisco Nexus and MDS NX-OS Denial of Service Vulnerabilities

Cisco NX-OS on Nexus 4000 devices, etc. and MDS 9000 devices is the United States Cisco Cisco company's set of operating system running in the Nexus 4000 and other series of switch equipment and MDS 9000 series of fiber optic switch equipment. A security vulnerability exists in the implementation...

qemu: pcnet: multi-tmd buffer overflow in the tx path

A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to execute arbitrary code.

Buffer overflows occur when performing functions like cryptorecv when Autokey Authentication is used, ctlputdata, and configure. This allows a malicious attacker to execute arbitrary code by sending specially crafted NTP packets...

CVE-2012-3577

creationtimestamp| type| source ---|---|--- 2015-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37353...

Cisco StarOS Session Management Service Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-grade platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE, with Cisco StarOS as the operating system on board. A security vulnerability in the session-manager service of Cisco StarOS on Cisco ASR 5000 devices could be...

The vulnerability of the microprogramming software of the Cisco Nexus 7000 allows a remote attacker to bypass the device’s security mechanisms.

The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...

The vulnerability of the microprogramming software of Cisco Nexus 7000 allows a remote attacker to execute arbitrary code.

Buffer overflows occur when performing functions like cryptorecv when Autokey Authentication is used, ctlputdata, and configure. This allows a malicious attacker to execute arbitrary code by sending specially crafted NTP packets...

Cisco ASR ASR9K Security Bypass Vulnerability

The Cisco ASR 9000 Series is Cisco's integrated services router solution that uses the IOS XR Software modular operating system to provide carrier-class reliability. A security vulnerability exists in the Object-ACL matching process of the Cisco Aggregation Services Router 9000 ASR9K, which can b...

Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability

The Cisco Catalyst 4500 E-Series is the next-generation, high-performance extension of the already widely deployed Cisco Catalyst 4500 Series of Ethernet modular switches. On Catalyst 4500 devices with Cisco IOS 15.12SG4 configured with single-switch VSS, SNMP has a security vulnerability in its...