7410 matches found
CVE-2017-16348
An exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo functionality allows for arbitrarily rebooting the device without authentication. An attacker can send a UDP packet to trigger this vulnerability...
CVE-2017-16348
CVE-2017-16348 is a confirmed Insteon Hub DoS vulnerability affecting firmware 1012. A leftover demo task (RebootTask) reboots the device when it receives a UDP packet, exploitable without authentication. Talos reports attackers can continuously send UDP packets to port 69 to render the device un...
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 12.0 director security and bug fix update
An update for memcached is now available for Red Hat OpenStack Platform 12.0 Pike. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2018-15492
A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 fixed in 8.5.3.2403 causes UDP amplification...
CVE-2018-15492
A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 fixed in 8.5.3.2403 causes UDP amplification...
Design/Logic Flaw
A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 fixed in 8.5.3.2403 causes UDP amplification...
CVE-2018-15492
Sentinel License Manager's lservnt.exe (version 8.5.3.35) contains a vulnerability that allows UDP amplification leading to denial of service. The issue arises from failing to validate the source IP address and is fixed in version 8.5.3.2403. Multiple sources (CNVD-2018-16300, NVD CVE-2018-15492)...
CVE-2018-15492
A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 fixed in 8.5.3.2403 causes UDP amplification...
Security update for libheimdal (important)
This update for libheimdal to version 7.5.0 fixes the following issues: The following security vulnerability was fixed: - CVE-2017-17439: Fixed a remote denial of service vulnerability through which remote unauthenticated attackers were able to crash the KDC by sending a crafted UDP packet...
CVE-2018-0409
A vulnerability in the XCP Router service of the Cisco Unified Communications Manager IM & Presence Service CUCM IM&P and the Cisco TelePresence Video Communication Server VCS and Expressway could allow an unauthenticated, remote attacker to cause a temporary service outage for all IM&P users,...
Crestron Device Detection (CIP)
Crestron Internet Protocol CIP based detection of Crestron devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
wireshark/fuzzshark_ip_proto-udp: Crash in ieeeNUMBER_radiotap_iterator_next
Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed report: https://oss-fuzz.com/testcase?key=4830306396798976 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type:...
Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Kernel UDP Fragmentation Offset UFO Privilege Escalation', 'Description' = %q This module attempts to gain root privileges on Linux systems...
Universal Media Server 7.1.0 - SSDP Processing XML External Entity Injection
Universal Media Server 7.1.0 - SSDP Processing XML External Entity Injection Issue: Out-of-Band XXE in Universal Media Server's SSDP Processing Reserved CVE: CVE-2018-13416 Vulnerability Overview The XML parsing engine for Universal Media Server's SSDP/UPNP functionality is vulnerable to an XML...
Ednet Gateway Detection via UDP
Binary data 700288.prm...
D-Link Wi-Fi Day Camera Detection via UDP
Binary data 700275.prm...
CVE-2016-6567
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
CVE-2016-6567
The CVE-2016-6567 entry describes SHDesigns’ Resident Download Manager for Rabbit 2000/3000 CPU boards as not authenticating firmware updates before executing code. A remote attacker able to send UDP traffic could potentially execute arbitrary code on the device. Public details indicate the Resid...
CVE-2016-6567 SHDesigns' Resident Download Manager (as well as the Ethernet Download Manager) does not authenticate firmware downloads before executing code and deploying them to devices
SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager does not verify that the firmware is authentic before executi...
Design/Logic Flaw
Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...