The vulnerability of the User Interface sub-component of the Oracle WebCenter Sites Support Tools software platform allows a malicious individual to gain unauthorized access to read, modify, or add data, or to cause service interruptions.

The vulnerability of the User Interface sub-component of the Oracle WebCenter Sites Support Tools software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, or add...

The vulnerability of the TMW IEC 61850 Software Library and the TMW IEC 60870-6 (ICCP/TASE.2) Software Library lies in their inability to access uninitialized indicators, allowing attackers to cause service failures.

The vulnerability of the TMW IEC 61850 Software Library and the TMW IEC 60870-6 ICCP/TASE.2 Software Library relates to the access to an uninitialized indicator. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to gain unauthorized access to read, modify, or add data, or to cause a service failure.

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, or add data, or cause a service...

The vulnerability in the implementation of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to induce a service failure.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the apsteer file. Exploiting this vulnerability could allow a remote attacker to cause...

PT-2022-16196 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1010 and below ArubaOS-CX Switches versions 10.08.1050 and below ArubaOS-CX Switches versions 10.06.0190 and below Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP...

DEBIAN-CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

PT-2022-6915 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to a Denial of Service DOS attack that can occur when using snakeYAML to parse untrusted YAML files. If the parser is running on user-supplied input, an attacker may...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a configuration flaw. An attacker exploited the vulnerability to cause availability to...

The vulnerability of the Xstream Java library for converting objects to XML or JSON format allows a malicious actor to cause a service failure due to uncontrolled resource consumption.

The vulnerability of the Xstream library for converting objects into XML or JSON format involves an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

The vulnerability of the Wi-Fi router software WS7200-10, related to ICMP packet processing errors, allows a intruder to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Wi-Fi router software WS7200-10 is related to ICMP packet processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Chrome OS’ blocking screen allows a hacker to disclose protected information or cause a service failure.

The vulnerability of the Chrome OS blocking screen is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information or cause service failures...

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerabilities of Kepware KEPServerEX, ThingWorkx Kepware Server, ThingWorx Industrial Connectivity, ThingWorx Kepware Edge, and OPC-aggregator PTC OPC-Aggregator software are related to buffer overflows in dynamic memory. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerabilities of the Kepware KEPServerEX, ThingWorkx Kepware Server, ThingWorx Industrial Connectivity, ThingWorx Kepware Edge, and OPC-agregator PTC OPC-Aggregator software are related to buffer overflows in dynamic memory. Exploiting these vulnerabilities can allow a malicious actor to ga...

The vulnerabilities of Kepware KEPServerEX, ThingWorkx Kepware Server, ThingWorx Industrial Connectivity, ThingWorx Kepware Edge, and OPC-aggregator PTC OPC-Aggregator software are related to buffer overflows in the stack. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerabilities of the Kepware OPC-server software, including KEPServerEX, ThingWorkx Kepware Server, ThingWorx Industrial Connectivity, ThingWorx Kepware Edge, and the OPC-aggregator PTC OPC-Aggregator, are related to buffer overflows in the stack. Exploiting these vulnerabilities can allow ...

CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

CVE-2022-38116

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service...

CVE-2022-26527

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the size of segmented packets’ reference parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

Buffer overflow

Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for the length of segmented packets’ shift parameter. An unauthenticated attacker in the adjacent network can exploit this vulnerability to cause buffer overflow and disrupt service...

Sql injection

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...