17066 matches found
CVE-2023-22408
An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. When an attacker sends an SIP packets with a malformed SDP field then the SIP ALG can not process i...
DataX-Web code-related vulnerabilities
DataX-Web is a distributed data synchronization tool developed on top of DataX by WeiYe's personal developers. A security vulnerability exists in DataX-Web v1.0.0 and v2.0.0 to v2.1.2, which stems from the fact that its RPC interface does not perform privilege checking by default, allowing an...
DEBIAN-CVE-2022-3977
A use-after-free flaw was found in the Linux kernel MCTP Management Component Transport Protocol functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on...
CVE-2023-22394 Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls
An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to cause a memory leak leading to Denial of Services DoS. This issue occurs on all MX Series platforms with MS-MPC or MS-MI...
Windows ALPC Privilege Escalation
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code with SYSTEM privileges...
CVE-2021-46779
Insufficient input validation in SVCECCPRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential loss of integrity and availability...
CVE-2021-26398
Insufficient input validation in SYSKEYDERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential arbitrary code execution...
CVE-2021-26398
Insufficient input validation in SYSKEYDERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential arbitrary code execution...
AMD Secure Processor Buffer Error Vulnerability
AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. ASP AMD Secure Processor suffers from a buffer error vulnerability that stems from insufficient input validation in the SYSKEYDERIVE system call. An attacker could exploit this vulnerability to corrupt th...
PT-2023-1290 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX 5000 Series versions 20.4 through 20.4R3-S4 Juniper Networks Junos OS on SRX 5000 Series versions 21.1 through 21.1R3-S3 Juniper Networks Junos OS on SRX 5000 Series versions 21.2 through 21.2R3-S2 Juniper...
CVE-2023-21674
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2023-21525
Remote Procedure Call Runtime Denial of Service Vulnerability...
CVE-2023-21525
Remote Procedure Call Runtime Denial of Service Vulnerability...
CVE-2023-21525
Remote Procedure Call Runtime Denial of Service Vulnerability...
Denial of service
Remote Procedure Call Runtime Denial of Service Vulnerability...
EXNESS: Double forward slash breaks server-side restrictions & allows access to prohibited services from a partner account
A vulnerability was discovered where making an API call with double/multiple forward slashes broke server-side restrictions imposed upon a partner account, allowing unrestricted access to the autorebates facility, which was otherwise unavailable to the partner account...
CVE-2022-4422
Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...
CVE-2022-4422
Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...
Sql injection
Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...
