The vulnerability of the cmd.exe command-line interpreter of the Windows operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the cmd.exe command-line interpreter of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of JunOS operating system’s MX series routers lies in the simultaneous execution using shared resources with improper synchronization, allowing attackers to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the JunOS operating system’s MX series routers lies in the simultaneous execution of processes using shared resources with incorrect synchronization. Exploiting this vulnerability allows a remote attacker to enhance their privileges, execute arbitrary code, or cause service...

The vulnerability of the JunOS operating system’s SRX series routers’ implementation of the Internet Content Adaptation Protocol (ICAP) allows attackers to enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the Internet Content Adaptation Protocol ICAP implementation in the JunOS operating system’s SRX series routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to enhance their privileges,...

Siemens network software vulnerabilities, related to buffer overflows in dynamic memory, allow attackers to execute arbitrary code or cause system failures.

The vulnerability of Siemens network software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

Microsoft SharePoint 输入验证错误漏洞

SharePoint is a web-based collaboration platform that integrates with Microsoft Office.SharePoint Server is one of the versions of SharePoint that is installed on a customer's IT infrastructure and is designed to give an organization greater control over the behavior or design of...

The vulnerability of the adx_write_trailer function in the libavformat library of the Ffmpeg multimedia environment, which allows a hacker to cause a service failure.

The vulnerability of the adxwritetrailer function in the libavformat library of the Ffmpeg multimedia environment is related to division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of Huawei’s microprogrammed router software, related to authentication errors, allows attackers to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of Huawei’s microprogrammed router software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges, execute arbitrary code, or cause service failures...

The vulnerability in the web interface of Cisco IOS XE operating systems allows a hacker to trigger a service failure.

The vulnerability of Cisco IOS XE operating system’s web interface UI is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product...

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product...

SAP warns of malicious activity targeting unpatched systems

A timely warning to keep systems patched has appeared, via a jointly-released report from Onapsis and SAP. The report details how threat actors are “targeting and potentially exploiting unprotected mission-critical SAP applications”. Some of the vulnerabilities used were weaponised fewer than 72...

Watch Out! Mission Critical SAP Applications Are Under Active Attack

Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research. "Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common securit...

CVE-2021-28183

The specific function in ASUS BMC’s firmware Web management page Web License configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the...

The vulnerability of the Chrony daemon in the implementation of the Network Time Protocol (NTP) allows a attacker to cause a service failure.

The vulnerability of the Chrony daemon in the implementation of the Network Time Protocol NTP is related to an incorrect definition of the link before accessing the file in the /var/run/chrony directory. Exploiting this vulnerability could allow a attacker to cause a service failure by using a...

The vulnerabilities of the crypto/x509 libraries and the golang.org/x/crypto/cryptobyte library in the Go programming language allow attackers to induce a service failure.

The vulnerability of the crypto/x509 libraries and golang.org/x/crypto/cryptobyte programming language is related to errors in the certificate validation process. Exploiting this vulnerability allows an attacker to cause service interruptions...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which stems from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate Web...

The vulnerability of the authenticate function in the services/httpd/handler.go component of the database, related to the deficiencies in the authentication process, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability in the authenticate function of the services/httpd/handler.go component of the database backend, InfluxDB, stems from the lack of a check to ensure that a value is present in the parameter. Exploiting this vulnerability allows an attacker who operates remotely to access...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for Cisco IOS XE allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP protocol implemented by Cisco IOS XE lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

The vulnerability of the Dovecot mail server’s components lda, lmtp, and imap, related to insufficient input data validation, allows attackers to cause service failures.

The vulnerability of the Dovecot mail server’s components lda, lmtp, and imap is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the lldpdecode function in the daemon/protocols/lldp.c component of the LLDP protocol under Unix systems, related to buffer overflow in memory, allows a malicious actor to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the lldpdecode function in the daemon/protocols/lldp.c component of the LLDP protocol under Unix allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability is related to buffer overflow in memory...