The vulnerability of Netgear’s networking hardware’s microprogramming software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of Netgear’s networking hardware’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted SOAP requests...

Vulnerability of the `sof_set_get_large_ctrl_data()` function (sound/soc/sof/ipc.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the sofsetgetlargectrldata function sound/soc/sof/ipc.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Cisco Wireless LAN Controller web interface allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Wireless LAN Controller web interface is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the insecure management of privileges, allowing attackers to elevate their privileges, cause service failures, and expose sensitive information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, and expose sensitive information...

The vulnerability of the Extension.dll library in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. This vulnerability allows attackers to exploit their privileges, cause service failures, and disclose sensitive information.

The vulnerability of the Extension.dll library used in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain elevated privileges, cause service interruptions, and expose sensitive information...

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the Cisco AsyncOS operating system’s web server interfaces, such as Cisco Web Security Appliance, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service interruptions or gain unauthorized access to protected...

The vulnerability of the ccp_run_sha_cmd() function (drivers/crypto/ccp/ccp-ops.c) in the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the ccprunshacmd function drivers/crypto/ccp/ccp-ops.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to incorrect session duration settings. This allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

PT-2019-17561 · Huawei · Huawei S5700 +2

Name of the Vulnerable Software and Affected Versions: Huawei S5700 and S6700 affected versions not specified Description: The issue is related to a DoS security vulnerability. Attackers with certain permissions can perform specific operations on affected devices, exploiting the vulnerability due...

The vulnerability of the Apache HTTP Server web server, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to the issue of operations going beyond the buffer in memory after reaching the read size limit for HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ReadSIXELImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ReadSIXELImage function in the ImageMagick console-based graphics editor coders/sixel.c arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server allows a attacker to cause service failures or lead to incorrect server configuration.

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures or lead to incorrect server configuration...

The vulnerability of the mod_cache_socache module in the Apache HTTP Server, related to reading data beyond the buffer’s acceptable limit, allows attackers to cause service failures.

The vulnerability of the modcachesocache module in the Apache HTTP Server relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Cesanta Mongoose Input Validation Error Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. An input validation error vulnerability exists in Cesanta Mongoose. The vulnerability stems from a network system or...

CVE-2019-6673

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

CVE-2019-6673

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

Code injection

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

CVE-2019-6673

CVE-2019-6673 affects F5 BIG-IP when configured in HTTP/2 Full Proxy mode, where specifically crafted requests may disrupt the Traffic Management Microkernel (TMM). Affected versions include BIG-IP 15.0.0–15.0.1 and 14.0.0–14.1.2. Remediation per vendor advisory is to upgrade to non-vulnerable re...

CVE-2019-6673

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...