The vulnerability of the PhpFastCache PHP library, related to deficiencies in the deserialization mechanism, allows attackers to trigger a denial-of-service attack.

The vulnerability of the PhpFastCache PHP library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

Information disclosure

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

CVE-2021-33214 affects HMS Networks eCatcher prior to or up to version 6.6.4. The vulnerability arises from weak filesystem permissions that could allow malicious users to access files, potentially leading to sensitive information disclosure, modification of configuration files, or disruption of ...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

DarkSide Ransomware: Best Practices for Preventing Business Disruption from Ransomware Attacks

Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework, Version 9. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of...

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-20149)

Pexip Infinity Pexip video conferencing cloud collaboration platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity's call setup is vulnerable to an input validation error. An unauthenticated remote attacker can use this vulnerability to trigg...

The vulnerability of the XML Xerces-C library, related to memory usage after it is freed, allows attackers to access confidential information or cause service failures.

The vulnerability of the Xerces-C library for working with XML is related to incorrect DTD scanning. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

The vulnerability of the `bufferedReadPixels` function in software for storing OpenEXR images with a wide dynamic range of brightness levels arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the bufferedReadPixels function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to buffer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the `src/lib/openjp2/pi.c` file of the OpenJPEG image encoding and decoding library occurs when the output of certain operations exceeds the allowable buffer data size. This allows an attacker to trigger a service failure.

The vulnerability in the src/lib/openjp2/pi.c component of the OpenJPEG image encoding and decoding library is related to the execution of operations that exceed the allowable buffer size limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability in the `src/lib/openjp2/pi.c` file of the OpenJPEG image encoding and decoding library, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability in the src/lib/openjp2/pi.c component of the OpenJPEG image encoding and decoding library is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Pexip Infinity 输入验证错误漏洞

Pexip Infinity Pexip video conferencing cloud collaboration platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity's call setup is vulnerable to an input validation error. An unauthenticated remote attacker can use this vulnerability to trigg...

The vulnerability of the software for creating a private virtual network, astra-openvpn-server, related to integer overflows, allows a hacker to cause a service failure.

The vulnerability of the software used to create the private virtual network astra-openvpn-server is related to improperly defined variable boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the repeated release of the memory area, enabling a hacker to access sensitive information.

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console-based image editing tool ImageMagick is related to the repeated release of a memory area. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, an...

The vulnerability of the image-compositor.c component in the Cairo vector graphics library, related to buffer overflows in the data stack, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the image-compositor.c component in the Cairo vector graphics library is related to buffer overflows in the data stack. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a special...

The vulnerability of the astra-safepolicy security configuration software, related to access control deficiencies. Exploiting this vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the astra-safepolicy security configuration software relates to the disabling of the MAC mode. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...