1364 matches found
The vulnerability of the nbdcopy tool in the libnbd library allows a perpetrator to automatically create corrupted target images.
The vulnerability of the nbdcopy tool in the libnbd library is related to exceptions handling deficiencies. Exploiting this vulnerability allows a remote attacker to automatically create corrupted target images...
This Week in Spring - March 29th, 2022
Aloha, Spring fans, from beautiful Maui, Hawaii, where I am with my family on a bit of vacation. Its our daughters Spring break and so were enjoying the family time while we can get it! I wanted to take a brief interlude in between the never-enough time on the beach and all the rum to get this...
CVE-2022-25252 PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions
When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions when receiving certain input throws an exception. Services using said function do not handle the exception. Successful exploitation of this vulnerability could allow a remote unauthenticat...
Multiple vulnerabilities in Trend Micro ServerProtect
Overview Trend Micro Incorporated has released security updates for ServerProtect. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Remote control execution due to insufficiently protected static credentials Denial-of-servic...
Denial Of Service (DoS)
Zip4j is vulnerable to denial of service. The vulnerability exists due to library does not properly handle exceptions. allowing an attacker to crash the application by providing a crafted ZIP file causing an application crash...
Improper Handling of Exceptional Conditions inn metadata-extractor
metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...
[SECURITY] Fedora 34 Update: xstream-1.4.19-1.fc34
XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...
GHSA-HP5X-RQF7-43VF Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty
Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response...
The vulnerability of the smgd subscriber management demon on Juniper Networks’ Junos OS-based MX router devices allows a attacker to cause a service failure.
The vulnerability of the smgd subscriber management daemon for Juniper Networks’ Junos OS routers in the MX series operating systems is related to improper handling of exceptions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Design/Logic Flaw
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive...
ABB SPIET800 安全漏洞
Abb Spiet800 is an Ethernet Ciu transport module from Abb Switzerland. A security vulnerability exists in Abb Spiet800 and PNI800, which arises from improper handling of exceptions in the module, which could be exploited by an attacker to cause a denial of service or render the module unresponsiv...
Security Bulletin: Information Disclosure in IBM WebSphere Application Server Liberty affects IBM Spectrum Protect Snapshot for VMware (CVE-2018-1553)
Summary Information disclosure vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager for VMware. Vulnerability Details CVEID: CVE-2018-1553 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remot...
Engine.Io 代码问题漏洞
Engine.Io is a transport-based implementation of the cross-browser/cross-device bi-directional communication layer of Socket. A code issue vulnerability exists in Engine.IO that stems from the product's failure to effectively handle exceptions raised by special HTTP requests. An attacker could us...
CVE-2021-37118
The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may lead to message leak...
Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems
Overview Multi-function printers MFP and printing systems provided by KONICA MINOLTA, INC. contain multiple vulnerabilities listed below. Incorrect authorization CWE-863 - CVE-2021-20868 Exposure of sensitive information to an unauthorized actor CWE-200 - CVE-2021-20869 Improper handling of...
KONICA MINOLTA MFPs and printing systems 安全漏洞
KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. A security vulnerability exists in KONICA MINOLTA MFPs and printing systems due to improper exception handling...
Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.
...
The vulnerability of the web interface of Cisco Expressway software and the micro-programming software of Cisco TelePresence Video Communication Server allows a perpetrator to execute arbitrary code.
The vulnerability of the web interface of Cisco Expressway microprogramming software and the Cisco TelePresence Video Communication Server microprogramming software for device management allows for arbitrary code execution by a remote attacker. This vulnerability is related to improper cleaning o...