CVE-2020-5599

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains an improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability, which may allow a remot...

CVE-2020-5595

TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a buffer overflow vulnerability, which may allow a remote attacker to stop the network functions of the products or execut...

The vulnerability in the implementation of the Server Message Block (SMBv3) network protocol on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Server Message Block SMBv3 network protocol implementation in Microsoft Windows systems is related to improper handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted packets...

Taking a Human Approach to a Global Crisis

Since March, the COVID crisis has caused massive disruption to every area of life and work. It has tested us, as individuals and as a business. Akamai has taken a very human-centric approach during the pandemic. Our guiding principle has been to do what is right for the health and safety of...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a attacker to cause service failures or execute arbitrary code with root privileges.

The vulnerability in the web-based administration interface of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 arises from an operation that goes beyond the buffer limits in memory. Exploiting this...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the driver for hardware encryption in Cisco IOS XE allows a hacker to disconnect VPN Ipsec sessions.

The vulnerability of the Cisco IOS XE operating system’s hardware encryption driver is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to disable VPN Ipsec sessions remotely...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a attacker to cause service failures or execute arbitrary code with root privileges.

The vulnerability in the web-based administration interface of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 arises from an operation that goes beyond the buffer limits in memory. Exploiting this...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

traceroute injection vulnerability

traceroute is a package for executing traceroute-related commands from the American software developer James Weston. An injection vulnerability exists in the traceroute package version 1.0.0 and earlier Node.js. This vulnerability can be exploited by remote attackers to disrupt the operation of a...

The vulnerability of the doc/docmacromode.cxx component in the LibreOffice office software package allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the doc/docmacromode.cxx component in the LibreOffice office software package is related to a deficiency in the processing of macros. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise th...

The vulnerability of the statem/statemdtls.c component in the OpenSSL library, which allows a hacker to cause a service failure.

The vulnerability of the statem/statemdtls.c component in the OpenSSL library is related to a resource management mechanism error. Exploiting this vulnerability could allow an attacker to cause service interruptions through a specially created DTLS message...

The vulnerability of the LD_LIBRARY_PATH environment variable in Apache OpenOffice’s office programs allows a hacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the LDLIBRARYPATH environment variable in Apache OpenOffice applications is related to a lack of mechanisms for privilege control and access management. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential data, cause service failures,...

The vulnerability of the ssl3_read_bytes function (record/rec_layer_s3.c) in the OpenSSL library, which allows a hacker to cause a service failure.

The vulnerability of the ssl3readbytes function in the record/reclayers3.c file of the OpenSSL library exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Lotus Word Pro import filter in the LibreOffice office software package allows a intruder to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the Lotus Word Pro import filter in the LibreOffice office software package relates to the execution of operations within acceptable data buffer limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the EVP_EncodeUpdate function (crypto/evp/evp_enc.c) in the OpenSSL library, related to an error in processing a number, allows a perpetrator to trigger a service failure.

The vulnerability of the EVPEncodeUpdate function crypto/evp/evpenc.c in the OpenSSL library is related to an error in processing numbers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the modules/serverdensity_device.py of the configuration management system and SaltStack remote execution module allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability in the modules/serverdensitydevice.py module of the Configuration Management system and SaltStack’s remote execution feature is related to a data processing error. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the consoleinst.sh component of the Installation Manager IBM allows a malicious individual to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the consoleinst.sh component of the Installation Manager IBM is related to privilege management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity...

The vulnerability of the Apache OpenOffice office software component relates to the occurrence of operations beyond buffer boundaries in memory. This allows attackers to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the Apache OpenOffice office software component relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...