11932 matches found
CLSA-2024-1729546540 openssl: Fix of CVE-2024-6119
CVE-2024-6119: avoid type errors in EAI-related name check logic...
The vulnerability of the Linux operating system’s kernel, related to type conversion errors, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to state management errors, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Local Security Authority (LSA) service in the Windows operating system allows a perpetrator to elevate their privileges.
The vulnerability of the Local Security Authority LSA service in the Windows operating system is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the driver/gpu/drm/vc4/vc4_hdmi.c kernel component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/gpu/drm/vc4/vc4hdmi.c kernel component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Linux operating system’s kernel, related to state management errors, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Moodle 4.3.x < 4.3.8 Multiple Vulnerabilities
According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.14, 4.2.x prior to 4.2.11, 4.3.x prior to 4.3.8, or 4.4.x prior to 4.4.4. It is, therefore, affected by multiple vulnerabilities. - An IDOR when fetching report schedules. - Some users can...
Citrix Provisioning - SoapService errors in the event viewer after installing 2042 CU2
Since installing 2402 CU2 there are multiple errors in the event viewer. The event logged during Citrix PVS Soap Server start: Source: SoapService Event ID: 1 Level: Error Event Data:MapiException: ErrorCodeOtherException An unexpected MAPI error occurred. The event logged every 5 minutes: Source...
The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the DRM/amd/display components in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the DRM/AMD/display components of the Linux operating system allows a perpetrator to influence the accessibility of protected information.
The vulnerability of the DRM/AMD/display components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to influence the accessibility of protected information...
The vulnerability of Windows Defender Application Control (WDAC) in Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of Windows Defender Application Control WDAC on Windows operating systems is related to errors in access control. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions...
The vulnerability of the Samba networking communication package, related to authentication errors, allows a perpetrator to gain access to confidential data.
The vulnerability of the Samba networking communication package is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
The vulnerability of the library for working with the DICOM format in DCMT, related to pointer assignment errors, allows a perpetrator to trigger a service failure.
The vulnerability of the library for working with the DICOM format in DCMT is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Microsoft Edge browser’s vulnerability, related to errors in data type mixing, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Edge is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
OpenSSL 资源管理错误漏洞
OpenSSL is an open source general-purpose cryptographic library capable of implementing the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols from the OpenSSL team. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...
USN-7422-1: FIS-GT.M vulnerabilities
It was discovered that FIS-GT.M could incorrectly dereference memory in certain instances. An attacker could possibly use this issue to cause FIS-GT.M to crash, resulting in a denial of service. CVE-2021-44492, CVE-2021-44498, CVE-2021-44508 It was discovered that FIS-GT.M could perform a divisio...
Denial Of Service (DoS)
@directus/storage-driver-s3 is vulnerable to Denial Of Service DoS. The vulnerability is due to asset unavailability caused by excessive HEAD requests, which allows an attacker to trigger 403 errors for all assets and deny access across all Directus policies...
The vulnerability of the section_nr_to_pfn() function in the include/linux/mmzone.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the sectionnrtopfn function in the include/linux/mmzone.h module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...