The vulnerability of the USB redirection channel (urbdrc) in the FreeRDP remote desktop protocol allows a intruder to trigger a maintenance failure.

The vulnerability of the USB redirection channel urbdrc in the FreeRDP remote desktop protocol is related to insufficient validation of input data during division by zero. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of NSD and Unbound DNS servers lies in the improper handling of symbolic links before accessing a file. This allows attackers to cause service failures.

The vulnerability of NSD and Unbound DNS servers is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to cause service failures...

Vulnerability of the sql/item_cmpfunc.cc component of the MariaDB database, which allows a hacker to cause service failure

The vulnerability in the sql/itemcmpfunc.cc component of the MariaDB database is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability in the open-source development environment for UEFI EDK2, related to uncontrolled recursion, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of open-source development environments for UEFI EDK2 is related to uncontrolled recursion. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the sql/item_func.cc component of the MariaDB database, which allows a hacker to cause service failures.

The vulnerability of the sql/itemfunc.cc component of the MariaDB database is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the `regionalloc` function in the `util/regional.c` component of the DNS server Unbound allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the regionalloc function in the util/regional.c component of the DNS server Unbound is related to integer overflow. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Grub configuration file allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Grub configuration file is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the cross-platform software development framework Qt, related to resource management errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cross-platform software development framework Qt is related to resource management errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created web page...

The vulnerability in the open-source development environment for UEFI EDK2, related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the open-source development environment for UEFI EDK2 relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Vulnerability of the /row/row0mysql.cc component in the MariaDB database, which allows a hacker to cause a service failure

The vulnerability in the /row/row0mysql.cc component of the MariaDB database is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the my_decimal::operator database component, which allows a hacker to trigger a service failure.

The vulnerability of the mydecimal::operator component of the MariaDB database lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

The vulnerability of the `flush_to_ldisc` function in the Linux operating system allows a hacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the flushtoldisc function in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failure...

MediaWiki 跨站脚本漏洞

MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki version 1.1 contains a cross-site scripting vulnerability, which stems from the ScratchLogin...

The vulnerability of the API interface of the Cisco Meeting Server platform allows a hacker to trigger a service failure.

The vulnerability of the Cisco Meeting Server’s API interface relates to insufficient validation of input data during request processing. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

PT-2022-34884 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to a use-after-free UAF problem in the nfqnl nf hook drop function when ops init fails. The actual impact and attack plausibility have not yet been proven. Recommendation...

GHSA-P72G-CGH9-GHJG Failing DTLS handshakes may cause throttling to block processing of records

Impact Failing handshakes didn't cleanup counters for throttling. In consequence the threshold may get reached and will not be released again. The results in permanently dropping records. The issues was reported for certificate based handshakes, but it can't be excluded, that this happens also fo...

Low: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

The vulnerability of Siemens’ microprogrammed software for routers, access points, and routers arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of Siemens’ microprogrammed routing devices, access points, and routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

undertow: Double AJP response for 400 from EAP 7 results in CPING failures

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...

The vulnerability of Moxa EDR-G903, EDR-G902, and EDR-810 microprogrammed router software lies in the lack of memory release, which allows attackers to trigger a service failure.

The vulnerability of Moxa EDR-G903, EDR-G902, and EDR-810 microprogrammed router software lies in the lack of memory release when processing a large number of packets. Exploiting this vulnerability can allow a remote attacker to cause service failures...