Input validation

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

PT-2021-14737

Name of the Vulnerable Software and Affected Versions ZTE ZXONE 9700 versions V1.40.021.021CP049 ZTE ZXONE 8700 versions V1.40.021.021CP049 ZTE ZXONE 19700 versions V1.40.021.021CP049 ZTE ZXONE 9700 versions V1.0P02B219 @NCPM-RELEASE 2.40R1-20200914.set ZTE ZXONE 8700 versions V1.0P02B219...

CVE-2021-21726: Improper Input Validation

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

Trojan-Dropper.Win32.Hamer.10 Denial Of Service

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/afe4e5219829a286e0b84025b073c259.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Dropper.Win32.Hamer.10 Vulnerability: Remote Floating-point Exception DoS Description: Trojan...

GHSA-QXX8-292G-2W66 Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

Improper Authentication

Impact A maliciously crafted claim may be incorrectly authenticated by the bot. Impacts bots that are not configured to be used as a Skill. This vulnerability requires an an attacker to have internal knowledge of the bot. Patches The problem has been patched in all affected versions. Please see t...

Debian: Security Advisory (DLA-2582-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

PT-2021-30839

Name of the Vulnerable Software and Affected Versions SML affected versions not specified Description The issue is related to an infinite loop in the SML lexer, which may lead to a denial-of-service DoS condition. Specifically, when the SMLLexer is fed the string "exception", it seems to loop...

CVE-2021-25338

Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region...

CVE-2021-25339

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory...

The vulnerability of the ARM System Memory Management Unit (SMMU) in NVIDIA Jetson TX2 processors allows a hacker to cause a system failure.

The vulnerability of the ARM System Memory Management Unit SMMU on NVIDIA Jetson TX2 processors lies in insufficient checking of exception states. Exploiting this vulnerability can allow attackers to cause system failures...

Exploit for Out-of-bounds Write in Adobe Acrobat

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bu...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

Design/Logic Flaw

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2020-27543: Improper Handling of Exceptional Conditions

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

ujson:ujson_fuzzer: Uncaught exception in ujson_fuzzer.pkg

Detailed Report: https://oss-fuzz.com/testcase?key=4551330244984832 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: ujsonfuzzer Job Type: libfuzzerasanujson Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: ujsonfuzzer.pkg ujsonfuzzer.pkg ujsonfuzzer.pkg Sanitize...

imageio:fuzz_read: Uncaught exception in read

Detailed Report: https://oss-fuzz.com/testcase?key=5635611575844864 Project: imageio Fuzzing Engine: libFuzzer Fuzz Target: fuzzread Job Type: libfuzzerasanimageio Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: read loadread load Sanitizer: address ASAN Crash...

Rust Resource Management Error Vulnerability (CNVD-2021-13651)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in versions of Rust prior to 0.3.1 that stems from insertsliceclone generating two drop actions when a Clone exception occurs. No details of the vulnerability are...