The vulnerability of the Dovecot mail server, related to reading beyond the buffer of memory, allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the Dovecot mail server is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, as well as cause service interruptions through a specially crafted email message...

The vulnerability of the `ff_htmlmarkup_to_ass` function in the FFmpeg multimedia library allows a hacker to induce a service failure.

The vulnerability of the ffhtmlmarkuptoass function in the FFmpeg multimedia library relates to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially crafted Matroska format video file...

CVE-2020-3174

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol ARP entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper...

The vulnerability of the pg_ctlcluster script in the postgresql-common package allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of the data.

The vulnerability of the pgctlcluster script in the postgresql-common package relates to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

The vulnerability of the Server:DDL component of the Oracle MySQL database management system allows a hacker to cause a service failure.

The vulnerability of the Server:DDL component of the Oracle MySQL database management system is related to an uncontrolled consumption of system resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the EventJobData::execute function in the MariaDB database management system allows a perpetrator to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Eventjobdata::execute function in the MariaDB database management system’s eventdataobjects.cc file is related to a lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service...

IBM DB2 Denial of Service Vulnerability (CNVD-2020-13054)

IBM DB2 is a set of relational database management system of American IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 version V11.5. An attacker can exploit this vulnerability to cause an...

CVE-2020-1855

Huawei HEGE-570 version 1.0.1.22SP3; and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21SP3 have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit...

CVE-2020-1814

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Dangling pointer dereference vulnerability. An authenticated attacker may do some special operations in t...

The vulnerability of the Prio library in the Firefox browser allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Prio library in the Firefox browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Necko web library in the Firefox browser is related to a access failure to child elements during an incorrect flow during the UDP connection. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Necko web library in the Firefox browser is related to an access error for a child element during a wrong transmission process in a UDP connection. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the software’s zip-file decompression mechanism in Cisco AsyncOS affects Cisco Email Security Appliance security systems. This vulnerability allows a hacker to trigger a service failure.

The vulnerability of the software’s zip-file decompression mechanism for Cisco Email Security Appliance systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the MallocFrameBuffer function in the cross-platform library LibVNCServer allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MallocFrameBuffer function in the cross-platform library LibVNCServer is related to a display overflow error, which leads to a heap overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servi...

CVE-2020-8989

In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different lengths of the metadata across the available voting choices, which makes it easier for remote attackers to discover this voter's choice by sniffing the network. Fo...

SIEMENS SCALAN CES-600 family Denial of Service Vulnerability

SCALANCE S firewall is used to protect trusted industrial networks from untrusted networks. A denial of service vulnerability exists in the SIEMENS SCALAN CES-600 family. An attacker could exploit the vulnerability by sending packets to port 443/tcp of the affected device, resulting in a denial o...

The vulnerability of the RouterOS operating system in MikroTik routers, related to the assignment of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik lies in the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created package...

The vulnerability of the Advanced UI interface of Oracle WebCenter Sites for online user services allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Advanced UI interface of Oracle WebCenter Sites for online user services is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or cause service failures using the HTTP...

The vulnerability of the Database Gateway for ODBC component in the Oracle Database Server database management system allows a hacker to gain access to modify, add, or delete data, or to cause partial service interruption.

The vulnerability of the Oracle Database Server ODBC driver’s database server lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to remotely modify, add, or delete data, or cause a partial service failure using the OracleNet network protocol...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures using the HTTP...