CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

CVE-2020-17525

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

CVE-2020-17525 Remote unauthenticated denial-of-service in Subversion mod_authz_svn

Subversion's modauthzsvn module will crash if the server is using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client sends a request for a non-existing repository URL. This can lead to disruption for users of the service. This issue was fixed in...

CVE-2020-27225

It was found that the Eclipse Platform does not authenticate requests to the Help subsystem on the local web server. A local attacker could use this vulnerability to disrupt the Eclipse user's session, potentially causing Eclipse to damage or disclose data owned by that user...

CVE-2021-28543

Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service daemon restart in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, ...

The vulnerability of TightVNC’s remote access components to a computer’s desktop allows a intruder to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of TightVNC’s remote desktop access system components is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the glyph_cache_put component in the implementation of the remote desktop protocol FreeRDP, related to reading data beyond the buffer’s acceptable limits, allows an intruder to access confidential data and also causes a service failure.

The vulnerability of the glyphcacheput component in the implementation of the remote desktop protocol FreeRDP is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the fact that data is written beyond the buffer boundaries in memory. This allows an attacker to execute arbitrary code or cause a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of VNC implementations with extensions for optimizing operations under slow data transmission channels, such as Tightvnc, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of VNC implementations with extensions for optimizing operations under slow data transmission channels, such as Tightvnc, is related to the execution of operations within the allowable buffer size limits. Exploiting this vulnerability can allow a remote attacker to gain access t...

The vulnerability of the opj_get_encoding_parameters function (openjp2/pi.c) in the OpenJPEG encoding and decoding library allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the opjgetencodingparameters function openjp2/pi.c in the OpenJPEG encoding and decoding library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failur...

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software suite is related to security flaws. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the MS-SAMR and MS-LSAD protocols in the Samba networking software package is related to security flaws. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerabilities of many functions in the Mercurial/subrepo.py version control tool allow attackers to compromise data integrity and cause service failures.

The vulnerability of several functions in the Mercurial version control software’s subrepo.py module is related to an incorrect definition of the reference before accessing a file. Exploiting this vulnerability could allow a remote attacker to compromise data integrity and also cause service...

The vulnerability of the FreeRDP remote desktop protocol components, related to reading data beyond the allowed buffer limits, allows attackers to access confidential data and cause service failures.

The vulnerability of the FreeRDP remote desktop protocol implementation relates to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and also cause service failures...

The vulnerability of the get_8bit_row function in the libjpeg library, which allows a hacker to cause a service failure

The vulnerability of the get8bitrow function in the libjpeg library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the Xref::getEntry function in the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the Xref::getEntry function in the Poppler PDF rendering library is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the JPEG file processing package, libjpeg-turbo, arises from the issue of allowing operations to exceed the allowable buffer data size, which allows an attacker to trigger a service failure.

The vulnerability of the JPEG file processing library libjpeg-turbo lies in the fact that it allows operations to be performed within acceptable buffer size limits. Exploiting this vulnerability could enable a malicious actor to cause service interruptions...

The vulnerability of the Snort intrusion detection system, related to the unlimited distribution of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Snort intrusion detection system is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions from a remote location...

The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol allows a intruder to gain access to confidential data and also trigger a service failure.

The vulnerability of the RLEDECOMPRESS component in the FreeRDP remote desktop protocol is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and also cause service failures...

The vulnerability of the PRIMARY_DRAWING_ORDER_FIELD_BYTES function in the FreeRDP remote desktop protocol implementation, related to reading data beyond the buffer’s acceptable limits, allows attackers to access confidential data and cause service interruptions.

The vulnerability of the PRIMARYDRAWINGORDERFIELDBYTES function in the FreeRDP remote desktop protocol implementation is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerability of the `Parser::makeStream` function in the Poppler PDF rendering library allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Parser::makeStream function in the Poppler PDF rendering library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...