Denial of service vulnerability in mod_RSsim (CNVD-2020-48915)

modRSsim is a simulation simulation software. A denial of service vulnerability exists in modRSsim, which can be exploited by attackers to cause a denial of service...

The vulnerability of the Deep Packet Inspection (DPI) implementation in the SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software allows a attacker to trigger a service failure.

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in unauthorized access to the indexed source. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the mwifiex_cmd.AppendAppend_vsie_tlv() function in Marvell Linux kernel drivers allows a hacker to escalate their privileges or cause service failures.

The vulnerability of the mwifiexcmd.AppendAppendvsietlv function in Marvell Linux kernel drivers is related to incorrect input validation. Exploiting this vulnerability can allow an attacker to gain elevated privileges or cause service interruptions...

The vulnerability of the Direct IO function in Linux operating system kernels allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Direct IO function in Linux operating systems lies in the fact that operations are performed outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

CVE-2020-10286 RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS

the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation...

CVE-2020-14609

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web Answers. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wi...

The vulnerability of the mmap() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the mmap function in Linux operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the EDNS Client Subnet (ECS) DNS-server BIND component, which allows a attacker to cause a service failure.

The vulnerability of the EDNS Client Subnet ECS DNS-server BIND component is related to errors in processing responses with incorrectly formed RRSIG fields. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the dns.c component in the HAProxy network software, related to the execution of a loop with an unavailable exit condition, allows a attacker to cause a service failure.

The vulnerability of the dns.c component in the HAProxy network software is related to its ability to enter an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the TIFFWriteDirectoryTagTransferfunction function in software for viewing, editing, and converting TIFF files arises from the possibility of an operation exceeding the permissible buffer data size. This vulnerability allows attackers to cause service failures.

The vulnerability of the TIFFWriteDirectoryTagTransferfunction function in software for viewing, editing, and converting TIFF files is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the nxdomain-redirect DNS server function in BIND allows a attacker to cause a service failure.

The vulnerability of the nxdomain-redirect DNS server’s BIND implementation lies in the use of the assert function or similar operators. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2020-15100

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

Critical SAP Bug Allows Full Enterprise System Takeover

A critical vulnerability, carrying a severity score of 10 out of 10 on the CvSS bug-severity scale, has been disclosed for SAP customers. SAP’s widely deployed collection of enterprise resource planning ERP software is used to manage their financials, logistics, customer-facing organizations, hum...

The vulnerability of the EKOM-3000 data collection and transmission device, which arises due to insufficient verification of input data, allows a perpetrator to cause temporary service interruption of the device’s web service.

The vulnerability of the ECOOM-3000 data collection and transmission device exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to temporarily disrupt the web service of the device’s operation...

The vulnerability of the EKOM-3000 data collection and transmission device, which arises due to insufficient verification of input data, allows a perpetrator to cause temporary service interruption.

The vulnerability of the EKOM-3000 data collection and transmission device exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause temporary service interruptions using specially crafted network packets...

UBUNTU-CVE-2020-14562

Vulnerability in the Java SE product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...

Building Security into Cloud Native Apps with NGINX

Industries from hospitality to taxis/transportation and food delivery are being disrupted by new age companies like Airbnb, Uber and DoorDash that have a cloud-based software infrastructure as one of their main enablers. Why do all these new companies use cloud and what advantage does it give the...

The vulnerability of the TIFFWriteScanline function in the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the TIFFWriteScanline function in the LibTIFF library arises from the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the pvrdma_realize function in the PVRDMA virtual network adapter allows a hacker to induce a service failure.

The vulnerability of the pvrdmarealize function in the PVRDMA virtual network adapter emulator for hardware emulation software QEMU is related to deficiencies in resource release after the expiration of its useful lifespan. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the `user_block_count` function in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the userblockcount function in Linux kernel relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...