The vulnerability of Trend Micro’s Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) lies in improper resource cleanup or release mechanisms. This allows attackers to cause the software to crash or fail to perform its functions.

The vulnerability of Trend Micro’s Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE lies in improper resource cleanup or release. Exploiting this vulnerability can allow an attacker to cause the software to crash or experience service failures due to a specially created file...

Netgear ProSAFE Integer Overflow (CVE-2020-35230)

An integer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Netgear ProSAFE Buffer Overflow (CVE-2020-35227)

A buffer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Apache Tomcat mod_jk Buffer Overflow

A buffer overflow vulnerability exists in Apache Tomcat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Design/Logic Flaw

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks when a response is buffered and the buffer limit is reached or Privoxy is running out of memory can lead to a system crash...

Denial of Service Vulnerability in Tenda AC9 (CNVD-2021-24932)

AC9 is a 1200M 11AC wireless router with Gigabit Ethernet port launched by Shenzhen Jixiang Tengda Technology Co. in 2016. The Tenda AC9 suffers from a denial of service vulnerability that can be exploited by an attacker to cause the program to crash...

SIEMENS JT2Go suffers from a denial of service vulnerability (CNVD-2021-24772)

SIEMENS JT2Go is a JT file viewer. It is used for lightweight previewing of 3D graphics with 3D zoom, panorama, rotation, scaling and repositioning, with precise 3D measurements, basic 3D profile viewing, improved option filters and many other features. SIEMENS JT2Go suffers from a denial of...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9135)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9135 advisory. 4.14.35-2047.500.9.3.el7uek - net/rds: Reject error code change Ka-Cheong Poon Orabug: 32577425 - PCI: hotplug: Add module parameter to allow user...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenSSL vulnerabilities (USN-4738-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4738-1 advisory. Paul Kehrer discovered that OpenSSL incorrectly handled certain input lengths in EVP functions. A remote attacker could possibly...

CVE-2021-27594

SAP 3D Visual Enterprise Viewer for Windows has a BMP input validation flaw (CVE-2021-27594) that causes the application to crash and become temporarily unavailable when opening manipulated BMP files from untrusted sources. Multiple sources (NVD, CNVD/CNNVD, Red Hat/other cve records) describe a ...

Amazon Linux 2 : openssl11 (ALAS-2021-1612)

The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1612 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases...

USN-4835-1 vcftools vulnerabilities

It was discovered that VCFtools improperly handled certain input. If a user were tricked into opening a crafted input file, VCFtools could be made to crash or possibly cause other unspecified impact. CVE-2018-11099, CVE-2018-11129, CVE-2018-11130 It was discovered that VCFtools improperly handled...

USN-4771-1: HTCondor vulnerabilities

It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this vulnerability to execute arbitrary commands. This issue only affected Ubuntu 14.04 ESM. CVE-2014-8126 It was discovered that HTCondor mishandled certain crafted input. An attacker could use this...

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2021-1460)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BlueZ 5.42, a use-after-free was identified in 'confopt' function in 'tools/parser/l2cap.c' source file. This issue can be...

EulerOS Virtualization 2.9.1 : nss (EulerOS-SA-2021-1615)

According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Network Security Services NSS before 3.46, several cryptographic primitives had missing length checks. In cases where the...

NewStart CGSL MAIN 6.02 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0056)

The remote NewStart CGSL host, running version MAIN 6.02, has thunderbird packages installed that are affected by multiple vulnerabilities: - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially...

CVE-2021-27592

When a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-21493

When a user opens manipulated Graphics Interchange Format .GIF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-20273

A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2021-1587)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...