The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the apngencodeframe and encodeapng functions in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects by using a specially created .avi file...

The vulnerability of the ScreenOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the L2TP packet processing function in the operating system ScreenOS exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using specially created L2TP packets...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a maintenance failure or a service interruption.

The vulnerability of the Cisco IOS operating system Industrial Ethernet 2000 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure e.g., device reboot...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or increase their privileges.

The vulnerability of the IOHIDFamily API for operating systems Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause a service failure memory corruption...

New Relic: CSRF - Regenerate all admin api keys

Hi The request to regenerate all admin api keys is a GET request without CSRF protection. As such, you can regenerate someone's keys using csrf. While not too big of an issue the admin can always see the keys and use them its certainly annoying and can cause business disruption. Additionally, a...

Design/Logic Flaw

The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass...

Digium Asterisk Open Source Denial of Service Vulnerability

Asterisk Open Source is an open source telephone exchange PBX system software from Digium, USA. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR and so on. A denial of service vulnerability exists in Digium Asterisk Open Source that allows remote...

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities in the Google Chrome browser implementation are related to the use of memory after it is freed. Exploiting these vulnerabilities could allow a malicious actor to cause service failures or potentially have other effects through a specially crafted PDF document, which i...

Apache Tomcat 7.0.0 < 7.0.68 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 7.0.68. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat7.0.68security-7 advisory. - The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x...

DNS BIND server vulnerability, which allows attackers to cause service failures or exert other effects

The vulnerability of the DNS BIND server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects, such as the appearance of an error message indicating “Assertion failure” or the termination ...

Cybozu Office access restriction bypass vulnerability

Overview Cybozu Office contains an access restriction bypass vulnerability in multiple functions. Impact A remote unauthenticated attacker may view the information about the groupware. An authenticated attacker may obtain privileged information or may cause specific functions to become unusable...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit module in the Safari browser and the iOS operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application termination through a specially crafte...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the FFmpeg multimedia library exists due to the retention of width and height parameters after a failure. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or potentially have other effects using a specially created .mov file...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the h264sliceheaderinit function libavcodec/h264slice.c in the FFmpeg multimedia library is due to buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially have other adverse effects by using specially crafted H.264...

PHP interpreter vulnerabilities that allow attackers to trigger service failures or cause other adverse effects

The multiple vulnerabilities of the phpescapeshellcmd or phpescapeshellarg functions ext/standard/exec.c in the PHP interpreter are caused by a numerical overflow. Exploitation of these vulnerabilities could allow a malicious actor to cause service failures or potentially have other effects by...

Vulnerabilities of the Google Chrome browser and the HarfBuzz text formatting library, which allow a perpetrator to trigger a service failure or exert other effects

The multiple vulnerabilities of the Google Chrome browser and the HarfBuzz text formatting library are related to code errors. Exploiting these vulnerabilities could allow a malicious actor to cause service interruptions or potentially have other adverse effects...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the OpenGL component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the ffdwtdecode function libavcodec/jpeg2000dwt.c in the multimedia library FFmpeg exists due to the lack of checks for the number of decomposition levels before performing the discrete wavelet transformation. Exploiting this vulnerability could allow a malicious actor to cau...

Important: ntp

Issue Overview: It was discovered that ntpd as a client did not correctly check the originate timestamp in received packets. A remote attacker could use this flaw to send a crafted packet to an ntpd client that would effectively disable synchronization with the server, or push arbitrary...

nginx denial of service vulnerability

nginx is an HTTP and reverse proxy server that can also be used as a mail proxy server. A security vulnerability exists in nginx that allows remote attackers to submit special requests for denial of service attacks...