2671 matches found
The vulnerability of the open implementation of the OpenLDAP protocol, related to the assertion that the accessibility is met, allows a violator to perform a denial-of-service attack.
The vulnerability of the open implementation of the OpenLDAP protocol is related to the assertion that it is achievable. Exploiting this vulnerability allows a malicious actor to perform a service denial by sending a specially crafted package with a short timestamp to slapd...
The vulnerability of the open implementation of the OpenLDAP protocol, related to the lack of use of the assert() function, allows a violator to perform a denial-of-service attack.
The vulnerability of the open implementation of the OpenLDAP protocol is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted package with a short timestamp...
CVE-2021-45462
In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...
Design/Logic Flaw
In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...
CVE-2020-20601
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...
CVE-2021-21901
A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this...
PT-2021-10516
Name of the Vulnerable Software and Affected Versions: ThinkCMF versions X2.2.2 and below Description: An issue in ThinkCMF allows attackers to execute arbitrary code via a crafted packet. Recommendations: For ThinkCMF versions X2.2.2 and below, at the moment, there is no information about a newe...
The vulnerability of the Microprogrammed Ethernet Module WISE-4060 and Adam-6050 D lies in errors in the password recovery mechanism, allowing attackers to reset the settings to the default values.
The vulnerability of the Ethernet microprogramming systems WISE-4060 and Adam-6050 D is related to errors in the password recovery mechanism. Exploiting this vulnerability allows a remote attacker to restore default settings using a specially crafted data packet...
CVE-2021-44224
There's a null pointer dereference and server-side request forgery flaw in httpd's modproxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix...
The vulnerability of the module of central processors in programmable logic controllers such as MELIPC, MELSEC iQ-R, MELSEC Q, and MELSEC L allows a intruder to trigger a service failure.
The vulnerability of the microcontroller modules in programmable logic controllers such as MELIPC, MELSEC iQ-R, MELSEC Q, and MELSEC L is related to errors in processing input data length parameters. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions...
CVE-2021-20144
An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...
CVE-2021-20138
An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to th...
Command injection
An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to...
CVE-2021-42683
A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...
The vulnerability of the “BKCLogSvr.exe” service in Yokogawa’s software products arises from the issue of buffer overflows occurring outside the scope of the service. This allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the “BKCLogSvr.exe” service in Yokogawa’s software products arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code by sending a specially crafted...
The vulnerability of the BKHOdeq.exe component in Yokogawa’s software products allows a hacker to execute arbitrary code with user privileges of the CENTUM system.
The vulnerability of the “BKHOdeq.exe” service in Yokogawa’s software products is caused by a buffer overflow based on a stack. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code with user privileges of CENTUM, by sending a specially created package to...
CVE-2021-36924
RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow leading to Escalation of Privileges, Denial of Service, and Code Execution via a crafted Device IO Control packet to a device...
CVE-2021-40117 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists because incomin...
CVE-2021-31351
An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Networks Junos OS allows a malicious attacker to send a specific packet, triggering the MS-MPC/MS-MIC to reset, causing a Denial of Service DoS. Continued receipt and processing o...