8084 matches found
The vulnerability of the p11_rpc_buffer_get_byte_array_value function in the library for working with PKCS P11-kit modules, related to writing beyond the buffer’s boundaries, allows a hacker to cause a service failure.
The vulnerability of the p11rpcbuffergetbytearrayvalue function in the library for working with PKCS P11-kit modules is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the phar_parse_zipfile function in the PHP programming language allows a perpetrator to access confidential data and also trigger a service failure.
The vulnerability of the pharparsezipfile function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...
The vulnerability of the vDaemon microprogramming software for Cisco IOS XE SD-WAN allows a attacker to trigger a service failure, execute arbitrary commands, or perform a “man-in-the-middle” attack.
The vulnerability of the vDaemon microprogramming software for Cisco IOS XE SD-WAN routers lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures, execute arbitrary commands, or carry out a...
The vulnerability of the SearchController class implementation in the web application for managing phpMyAdmin database management systems allows a hacker to cause a service failure.
The vulnerability of the SearchController class implementation in the web application for managing phpMyAdmin database management systems is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service...
DEBIAN-CVE-2021-3475
There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability...
The vulnerability of DCE/RPC DNS software for communicating with Samba network drives relates to default access rights settings, allowing a perpetrator to cause service failure.
The vulnerability of the DCE/RPC DNS software component for communicating with Samba network drives is related to an error in the RPC dnsserver communication channel, which allows for changes to DNS records and zones. Exploiting this vulnerability can enable a remote attacker to cause service...
The vulnerability of Okular’s PDF viewing software lies in the insufficient validation of input data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.
The vulnerability of Okular’s PDF viewing software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browser allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially created HTML page...
The vulnerability of Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for verifying the size of copied data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Squid proxy server’s mechanism for processing URN responses is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity...
The vulnerability of the scan.c component in the X11vnc server allows attackers to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the absence of a authentication mechanism.
The vulnerability of the scan.c component in the X11vnc server relies on the absence of an authentication mechanism. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the TFTP microprogramming software used in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices allows a intruder to cause service interruptions.
The vulnerability of the TFTP microprogramming software used in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability in the web interface for managing microprogramming software on Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 routers allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of the web-based management interfaces for Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 VPN routers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by sending specially...
The vulnerability affects the implementation of the COOKIE-ECHO extension for WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android. This vulnerability allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the COOKIE-ECHO extension implementation in WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure or...
The vulnerability of the Google Chrome browser’s presentation API involves the use of a memory area after it is freed. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome browser’s presentation API relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the GPU Display Driver’s graphical driver API involves unsafe management of privileges, allowing attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the GPU Display Driver’s graphics driver API is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of Blink’s web page display mechanism in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the Samba networking communication package lies in the reading of data beyond the allowed buffer size, allowing an attacker to cause a service failure.
The vulnerability of the Samba networking communication package is related to an error where “log level = 3” is displayed when the character conversion fails. This error results in a string from the user being printed. Exploiting this vulnerability can allow a remote attacker to cause service...
The vulnerability of the Mojo messaging library in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...