Geutebruck G-Cam/EFD-2250 Remote Code Execution Vulnerability

The Geutebruck G-Cam/EFD-2250 provides a faster and more secure solution for remote monitoring applications. A remote code execution vulnerability exists in the Geutebruck G-Cam/EFD-2250. An attacker could exploit this vulnerability to execute arbitrary code. A failed attack would result in a...

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of librm in NVIDIA’s Android operating system systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

The vulnerability of the Samsung operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the SmartCall Activity component in the Telecom operating system of the Samsung Mobile device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or increase their privileges...

The vulnerability of the Samsung operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the SpamCall Activity component in the Telecom operating system of Samsung Mobile is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or increase their privileges...

CVE-2016-2787

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors...

The vulnerabilities of the library that provides system calls and core functions in glibc allow a malicious actor to cause a service failure or execute arbitrary code.

Multiple vulnerabilities exist in the functions senddg and sendvc of the libresolv module’s library, which provides system calls and core functions for the glibc library. These vulnerabilities allow a malicious actor to trigger service failures or execute arbitrary code through a specially crafte...

Huawei HwVmall Local Security Bypass Vulnerability

Huawei HwVmall is a set of e-commerce platform for national service. A security vulnerability exists in the AlarmService service component in Huawei HwVmall versions prior to 1.5.2.0. The vulnerability stems from the fact that the program does not have invocation privilege control, and can be...

Vulnerability of the Server component: The character sets of the MySQL database management system, which allows attackers to trigger service interruptions.

Vulnerability of the Server component: The character sets of the MySQL database management system are vulnerable due to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash using...

Vulnerability of the Server component: DML of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component in the MySQL database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the system to become unresponsive or, in rare cases, to crash using network...

EMC Documentum D2 DQL Injection Vulnerability

EMC Documentum D2 is an enterprise-class content management system from EMC. The system manages the entire information lifecycle through creation, modification, tracking and other functions, and it includes a number of extensions, such as Documentum Web Publisher Web Content Management, Documentu...

Design/Logic Flaw

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

CVE-2016-9873

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

CVE-2016-9873

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the initial loader of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to execute arbitrary commands on the device’s modem. This issue is considered “high” because it causes continuous service...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the Ffmpeg component in the Google Chrome browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created video file...

CVE-2016-6090

IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial of service...

CVE-2017-3250

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2016-9221

A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause authentication to fail. Affected Products: This vulnerability affects Cisco Mobility...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the Omnibox component in Google Chrome relates to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures or otherwise affect the system through a specially created HTML page...

The vulnerability of Google Chrome browser allows a perpetrator to trigger an emergency termination of the application’s operation.

The vulnerability of the Blink component in Google Chrome browser is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially created HTML page...