Collaborate Disseminate
Microsoft Internet Explorer contains a scripting engine,which handles execution of scripting languages such as VBScript and JScript. The scripting engine JScript component contains an unspecified memory corruption vulnerability. Any application that su… Continue reading VU#573168: Microsoft Internet Explorer scripting engine JScript memory corruption vulnerability
Pixar’s Tractor software,versions 2.2 and earlier,contain a stored cross-site scripting vulnerability(CWE-79)in the field that allows a user to add a note to an existing node. The stored information is displayed when a user requests information about t… Continue reading VU#756913: Pixar Tractor contains a stored cross-site scripting vulnerability
CVE-2018-12037 There is no cryptographic relation between the password provided by the end user and the key used for the encryption of user data. This can allow an attacker to access the key without knowing the password provided by the end user,allowin… Continue reading VU#395981: Self-encrypting hard drives do not adequately protect data
Cisco Adaptive Security Appliance(ASA)software and Cisco Firepower Threat Defense(FTD)software fails to properly parse SIP traffic,which can allow an attacker to trigger high CPU usage,resulting in a denial-of-service condition on affected devices. Thi… Continue reading VU#339704: Cisco ASA and FTD SIP Inspection denial-of-service vulnerability
CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer CVE-2018-16986 – also known as BLEEDINGBIT The following Texas Instrument chips are affected: CC2640(non-R2)with BLE-STACK version 2.2.1 or an earlier version CC2650 with B… Continue reading VU#317277: Texas Instruments CC2640 and CC2650 microcontrollers vulnerable to heap overflow and insecure update
Texas Instruments Microcontrollers CC2640 and CC2650 are vulnerable to heap overflow Continue reading VU#317277: Texas Instruments Microcontrollers CC2640 and CC2650 are vulnerable to heap overflow
Cisco Adaptive Security Appliance(ASA)software and Cisco Firepower Threat Defense(FTD)software fails to properly parse SIP traffic,which can result in a denial-of-service condition on affected devices. Continue reading VU#339704: Cisco ASA and FTD SIP Inspection denial-of-service vulnerability
CWE-306:Missing Authentication for Critical Function – CVE-2018-5393 EAP Controller for Linux utilizes a Java remote method invocation(RMI)service for remote control. The RMI interface does not require any authentication before use. Remote attackers ca… Continue reading VU#581311: TP-Link EAP Controller lacks RMI authentication and is vulnerable to deserialization attacks
The Web Proxy Automatic Discovery(WPAD)protocol is used to automatically provide proxy configuration information to devices on a network. Clients issue a special DHCP request to obtain the information for the proxy configuration,but will fall back on a… Continue reading VU#598349: Automatic DNS registration and proxy autodiscovery allow spoofing of network services
CWE 798:୕se of Hard-Coded Credentials – CVE–2018-5399 The DCU 210E firmware contains an undocumented Dropbear SSH server with a hardcoded username and password. The password is easily susceptible to cracking. CWE-346:rigin Validation Error – CVE–2018-… Continue reading VU#176301: Auto-Maskin DCU 210E RP 210E and Marine Pro Observer App