EulerOS 2.0 SP5 : curl (EulerOS-SA-2019-1002)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This...

Logitech SqueezeCenter/Media Server Detection Consolidation

Consolidation of Logitech SqueezeCenter/Media Server detections. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Logitech SqueezeCenter/Media Server Detection (UDP)

Detection of a Logitech SqueezeCenter/Media Server via UDP. This script sends an UDP discovery request to the target and tries to get the version from the response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

EulerOS 2.0 SP2 : curl (EulerOS-SA-2018-1427)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This...

Zoom Desktop Application Unauthorized UDP Message (CVE-2018-15715)

Zoom clients are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof messages in the target client. This allows the attacker to remove attendees from meetings, spoof messages from users, or hijack shared screens...

CVE-2018-1000845

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2018-18442

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

Design/Logic Flaw

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

CVE-2018-18442 affects the D-Link DCS-825L (firmware 1.08). The vulnerability is a DoS due to insufficient input validation in the firmware, enabling a remote attacker to disrupt device availability (e.g., live video/audio streaming) via crafted or flood-like network traffic (syn/udp/icmp, includ...

CVE-2018-18442: Undefined Security Weakness

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

RHEL 7 : kernel (RHSA-2018:3843)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3843 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: NULL pointer dereference in...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite allows a attacker to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite is related to memory-related errors during the processing of the UDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Stack overflow

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

CVE-2018-16596

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

CVE-2018-16596

CVE-2018-16596 concerns a stack-based buffer overflow in the LAN UPnP service of Swisscom Internet-Box devices (2/Standard/Plus) on UDP port 1900. The flaw allows remote code execution if the attacker is inside the LAN and can send a UDP packet to port 1900; ASLR reduces reliability, making succe...

CVE-2018-16596

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

PT-2018-13635

Name of the Vulnerable Software and Affected Versions Swisscom Internet-Box 2, Standard, and Plus versions prior to v09.04.00 Swisscom Internet-Box light versions prior to v08.05.02 Description A stack-based buffer overflow in the LAN UPnP service allows remote code execution. No authentication i...

CVE-2018-16596: Out-of-bounds Write

A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box 2, Standard, and Plus prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UD...

CVE-2018-15715

Zoom clients on Windows before version 4.1.34814.1119, Mac OS before version 4.1.34801.1116, and Linux 2.4.129780.0915 and below are vulnerable to unauthorized message processing. A remote unauthenticated attacker can spoof UDP messages from a meeting attendee or Zoom server in order to invoke...