Design/Logic Flaw

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2022-27512 Temporary disruption of the ADM license service

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2022-27512

CVE-2022-27512 affects Citrix Application Delivery Management (ADM) server/agents (Citrix ADM 13.0 and 13.1). Root cause is a vulnerable FLEXlm license-manager implementation, enabling a remote attacker to disrupt the licensing service and block issuance/renewal of licenses, effectively a licensi...

Improper Access Control in Crabtyper API

Description The API program allows any user to create languages and snippets, as well as delete them. This allows a malicious actor to add offensive snippets which could appear to any user, and also allows anyone to completely take down the service by removing all snippets. This is due to...

Broker: Malformed message can result in partial DoS (OOM)

A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory OOM condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest...

The vulnerability of the Oracle Solaris operating system’s kernel allows a perpetrator to gain access to modify, add, or delete data, or cause partial service failure.

The vulnerability of the Oracle Solaris operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause partial service interruptions...

Citrix Application Delivery Management 资源管理错误漏洞

Citrix Application Delivery Management ADM is an application delivery management system from Citrix. The system provides features such as centralized network and application management. A resource management error vulnerability exists in Citrix Application Delivery Management, which is caused by ...

CVE-2022-27512

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

Citrix Application Delivery Management Security Bulletin for CVE-2022-27511 and CVE-2022-27512

Vulnerabilities have been discovered in Citrix Application Delivery Management Citrix ADM that, if exploited, could result in the following security issues: Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the ne...

CVE-2021-37182

A vulnerability has been identified in SCALANCE XM408-4C All versions V6.5, SCALANCE XM408-4C L3 int. All versions V6.5, SCALANCE XM408-8C All versions V6.5, SCALANCE XM408-8C L3 int. All versions V6.5, SCALANCE XM416-4C All versions V6.5, SCALANCE XM416-4C L3 int. All versions V6.5, SCALANCE...

CVE-2021-37182

A vulnerability has been identified in SCALANCE XM408-4C All versions V6.5, SCALANCE XM408-4C L3 int. All versions V6.5, SCALANCE XM408-8C All versions V6.5, SCALANCE XM408-8C L3 int. All versions V6.5, SCALANCE XM416-4C All versions V6.5, SCALANCE XM416-4C L3 int. All versions V6.5, SCALANCE...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

The vulnerability affects the implementation of the Control Point Access Point Wireless Provisioning Protocol (CAPWAP) on Cisco IOS XE operating systems, as well as Control Points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers. This allows a malicious actor to cause service interruptions.

The vulnerability of the CAPWAP protocol implementation in Cisco IOS XE operating systems, as well as in Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers, is related to an unvalidated return value that causes the zero pointer to be swapped...

The vulnerability of the vhost_vdpa_config_validate() function in Linux kernel allows a attacker to escalate their privileges or cause service failures.

The vulnerability of the vhostvdpaconfigvalidate function in Linux operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service failures...

The vulnerability of the NAS message processing component of the microprogramming software for 2/3/4/5G Unisoc devices allows a hacker to cause a service failure.

The vulnerability of the NAS-message processing component of microprogramming software for 2/3/4/5G Unisoc devices relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted...

Vulnerability of the OGRExpatRealloc function in the ogr/ogr_expat.cpp file. The GDAL geospatial transformation library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

Vulnerability of the OGRExpatRealloc function in the ogr/ogrexpat.cpp file. The GDAL geoprocessing library involves repeated memory reclamation. Exploiting this vulnerability may allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the TCP-proxy function in Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to trigger a service failure.

The vulnerability of the TCP-proxy function in Cisco Firepower Threat Defense FTD software relates to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted TCP traffic stream...

The vulnerability in the implementation of the PushLongPixel() function of the ImageMagick graphic editor allows a hacker to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the PushLongPixel function in the ImageMagick graphic editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or gain unauthorized access to protected information through a...

The vulnerability in the implementation of the vim regsub_both() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the vim regsubboth function in the Vim text editor is related to writing data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created file...

The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices, which stems from the transmission of data in an open manner via the HTTP protocol, allows attackers to intercept traffic and disrupt the operation of the devices.

The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices lies in the transmission of data in an open manner via the HTTP protocol. Exploiting this vulnerability can allow a remote attacker to intercept traffic and disrupt the operation of the device...