3590 matches found
Siemens SIPROTEC 4 Denial of Service Vulnerability
SIPROTEC 4 and SIPROTEC devices offer a wide range of integrated protection, control, measurement and power substation automation functions; EN100 modules are used to implement IEC 61850 communication. SIPROTEC 4 has been disclosed to have a denial of service vulnerability, which can be exploited...
Microsoft Windows Information Disclosure Vulnerability (CNVD-2015-04630)
Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold R2,Windows RT Gold 8.1, which allows local users to...
Cisco Nexus 7000 Device Local Elevation of Privilege Vulnerability
The Cisco Nexus 7000 Series switches help create the network infrastructure platform needed for next-generation unified array data centers. Multiple elevation of privilege vulnerabilities exist in the Python scripting subsystem on Cisco Nexus 7000 devices configured with multiple VDCs, which can ...
GarrettCom Magnum 6K and 10K Switches Remote Denial of Service Vulnerability
GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in the GarrettCom Magnum 6K and 10K Switches that allows remote attackers to exploit the vulnerability by submitting a special request to reload the device, resulting in a denial of...
Cisco ASR 9000 IOS XR Resource Management Error Vulnerability
Cisco IOS XR on ASR 9000 is a set of operating systems from Cisco that run in the 9000 series router devices. A security vulnerability exists in Cisco IOS XR version 5.3.1 for Cisco ASR 9000 devices. A remote attacker can exploit this vulnerability to cause a denial of service NPU chip reset or...
Cisco Nexus and MDS NX-OS Denial of Service Vulnerabilities
Cisco NX-OS on Nexus 4000 devices, etc. and MDS 9000 devices is the United States Cisco Cisco company's set of operating system running in the Nexus 4000 and other series of switch equipment and MDS 9000 series of fiber optic switch equipment. A security vulnerability exists in the implementation...
qemu: pcnet: multi-tmd buffer overflow in the tx path
A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the...
CVE-2012-3577
creationtimestamp| type| source ---|---|--- 2015-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37353...
The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a remote attacker to execute arbitrary code.
Buffer overflows occur when performing functions like cryptorecv when Autokey Authentication is used, ctlputdata, and configure. This allows a malicious attacker to execute arbitrary code by sending specially crafted NTP packets...
Cisco StarOS Session Management Service Denial of Service Vulnerability
The Cisco ASR 5000 Series is a carrier-grade platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE, with Cisco StarOS as the operating system on board. A security vulnerability in the session-manager service of Cisco StarOS on Cisco ASR 5000 devices could be...
The vulnerability of the microprogramming software of the Cisco Nexus 7000 allows a remote attacker to bypass the device’s security mechanisms.
The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...
The vulnerability of the microprogramming software of Cisco Nexus 7000 allows a remote attacker to execute arbitrary code.
Buffer overflows occur when performing functions like cryptorecv when Autokey Authentication is used, ctlputdata, and configure. This allows a malicious attacker to execute arbitrary code by sending specially crafted NTP packets...
Cisco ASR ASR9K Security Bypass Vulnerability
The Cisco ASR 9000 Series is Cisco's integrated services router solution that uses the IOS XR Software modular operating system to provide carrier-class reliability. A security vulnerability exists in the Object-ACL matching process of the Cisco Aggregation Services Router 9000 ASR9K, which can b...
Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability
The Cisco Catalyst 4500 E-Series is the next-generation, high-performance extension of the already widely deployed Cisco Catalyst 4500 Series of Ethernet modular switches. On Catalyst 4500 devices with Cisco IOS 15.12SG4 configured with single-switch VSS, SNMP has a security vulnerability in its...
Cisco Nexus 9000 Series Denial of Service Vulnerability
Cisco Nexus 9000 switches provide the foundation for an application-centric infrastructure that delivers outstanding scalability, performance, and energy efficiency. A security vulnerability exists in the SNMP subsystem of the Cisco Nexus 9000, which can be exploited by a remote, authenticated...
jasper: dec->numtiles off-by-one check in jpc_dec_process_sot() (oCERT-2015-001)
An off-by-one flaw, leading to a heap-based buffer overflow, was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...
CVE-2015-2264
CVE-2015-2264 involves untrusted search path vulnerabilities in Telerik Analytics Monitor Library (EQATEC.Analytics.Monitor.Win32_vc100.dll and Win32_vc100-x64.dll) used by Elipse E3. The root cause is loading Trojan horse DLLs (csunsapi.dll, swift.dll, nfhwcrhk.dll, or surewarehook.dll) from an ...
Multiple Siemens SPC Controller Product Denial of Service Vulnerabilities
Siemens SPC controllers are Siemens controller devices. A security vulnerability in the Siemens SPC controllers SPC4000, SPC5000, and SPC6000 allows attackers to exploit the vulnerability to submit messages for denial of service attacks...
PT-2015-1513
Name of the Vulnerable Software and Affected Versions Firmware variant PROFINET IO for EN100 Ethernet module versions prior to V1.04.01 Firmware variant Modbus TCP for EN100 Ethernet module versions prior to V1.11.00 Firmware variant DNP3 TCP for EN100 Ethernet module versions prior to V1.03...
