8084 matches found
CVE-2020-9201
There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal...
The vulnerability in the implementation of the ProcessNextState method (netwerk\streamconv\converters\nsBinHexDecoder.cpp) in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.
The vulnerability of the ProcessNextState method netwerk\streamconv\converters\nsBinHexDecoder.cpp in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after decompression improperly formatted BinHex archives. Exploiting this vulnerability can...
The vulnerability of the `get_next_file` function in the UNIX utility `tcpdump` involves a lack of mechanism for checking the size of input data. This leads to the output data exceeding the buffer’s capacity, allowing attackers to access protected information, cause service failures, or compromise the availability of information.
The vulnerability of the getnextfile function in the UNIX utility tcpdump is related to a lack of mechanism for checking the size of input data, resulting in the output operation being within the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to protecte...
The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.
The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...
The vulnerability of the _open_index function in the FpxImagePlugin.py library, a library for working with images from Pillow, related to integer overflow, allows a hacker to cause a service failure.
The vulnerability of the openindex function in the FpxImagePlugin.py library, a library for working with images, relates to a lack of mechanisms for controlling resource consumption. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...
The vulnerability of the Dovecot mail server, related to incorrect validation of input data, allows attackers to cause failures in the authentication service.
The vulnerability of the Dovecot mail server is related to incorrect validation of input data. Exploiting this vulnerability can allow a remote attacker to cause failures in the authentication service by sending a specially formatted RPA request...
The vulnerability in the `FeatureRef::applyValToFeature` function of the Graphite font library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.
The vulnerability of the FeatureRef::applyValToFeature function in the Graphite font library for browsers Firefox, Firefox ESR, and the email client Thunderbird is related to memory buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the KMS implementation in the Junos operating system allows a attacker to cause failures in the configuration of IPSec channels and service disconnection.
The vulnerability of the Junos operating system’s Key Management Service implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause failures in IPSec channel configurations and service availability...
The vulnerability of the Data-Loss-Prevention module in the Clam Antivirus antivirus software allows a hacker to trigger a service failure.
The vulnerability of the Data-Loss-Prevention module in the Clam Antivirus antivirus software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending a specially crafted email message...
The vulnerability of the mbfl_filt_conv_big5_wchar function in the PHP interpreter allows a hacker to access protected information or cause service failures.
The vulnerability of the mbflfiltconvbig5wchar function in the PHP interpreter arises due to an operation being performed outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...
SUSE SLES12 Security Update : xen (SUSE-SU-2020:3880-1)
This update for xen fixes the following issues : CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...
The vulnerability of the implementation of the Cisco Video Surveillance 8000 Series IP camera protocol allows a intruder to trigger a service failure.
The vulnerability of the Cisco Video Surveillance 8000 Series detection protocol lies in errors during the processing of detection protocol packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the authentication function of the Cisco IOS XE operating system’s web server allows a hacker to cause a malfunction in the web server’s operation.
The vulnerability of the Cisco IOS XE operating system’s server authentication function is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to cause malfunctions in the server...
F5 Networks BIG-IP : BIG-IP APM VDI plugin vulnerability (K73657294)
Under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption.CVE-2020-27722 Impact This affects only a BIG-IP APM virtual server configured with a Virtual Desktop InfrastructureVDI profile. Your BIG-IP system affected by this...
The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows an attacker to disclose protected information or cause service failures.
The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...
The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.
The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...
CVE-2020-5665
Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...
F5 BIG-IP Security Vulnerabilities
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, and load balancing. A security vulnerability exists in BIG-IP, which stems from a specific traffic pattern sent to a virtual server configured using an FTP profil...
The vulnerability of the sysctl hugetlbl utility in the Linux operating system allows a hacker to cause a service failure or increase privileges.
The vulnerability of the sysctl hugetlbl utility in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures or elevate privileges...
F5 Networks BIG-IP : BIG-IP LTM vulnerability (K20984059)
Certain traffic pattern sent to a virtual server configured with an FTP profilecan cause the FTP channel to break. CVE-2020-5949 Impact FTP traffic is disrupted. FTP clients are unable to connect to the FTP server and commands issued to the FTP server stall or fail. C Tenable Network Security, In...