3795 matches found
The vulnerability of the Data Plane Statistics module in the PAN-OS operating system allows a hacker to cause a service failure.
The vulnerability of the Data Plane Statistics module in the PAN-OS operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures by routing traffic through the firewall...
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to the manipulation of the null pointer, allowing attackers to cause service failures.
The vulnerability of Adobe After Effects video and dynamic image editing software relates to the handling of a special pointer. Exploiting this vulnerability can allow an attacker to cause service failures...
DEBIAN-CVE-2021-28709
issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have...
Security update for hylafax+ (moderate)
openSUSE Security Update: Security update for hylafax+ Announcement ID: openSUSE-SU-2021:1494-1 Rating: moderate References: 1191571 Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: hylafax+ was updated to version 7.0.4:...
CVE-2021-26336
CVE-2021-26336 concerns AMD System Management Unit (SMU) with insufficient bounds checking that can cause invalid memory accesses/updates, leading to an SMU hang and the system may fail to service further requests from other components. Multiple sources confirm the issue under the SMU and referen...
MedData Hbys SQL注入漏洞
A SQL injection vulnerability exists in MedData Hbys, a healthcare software from MedData, Inc. The vulnerability stems from the product's failure to effectively filter special characters in input data. An unauthenticated attacker could obtain sensitive information through this vulnerability...
The vulnerability of the software for creating metadata, processing, and exchanging sets of Adobe XMP-Toolkit-SDK standards lies in buffer overflows in dynamic memory. This allows attackers to gain access to protected information or cause service failures.
The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...
The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.
The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...
The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems allows a perpetrator to cause service failures.
The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the REST API interface of the system’s unified endpoint management console for VMware Workspace ONE UEM allows a attacker to trigger a service failure.
The vulnerability of the REST API interface of the Unified Management Console for VMware Workspace ONE UEM involves improper rate limiting at the endpoint level. Exploiting this vulnerability allows an attacker to cause service failures by sending a large number of requests...
November 9, 2021—KB5007247 (Monthly Rollup)
None None...
November 9, 2021—KB5007192 (OS Build 14393.4770) - EXPIRED
None None...
November 9, 2021—KB5007245 (Security-only update)
None None...
PYSEC-2021-815
TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...
CVE-2021-41208
TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding...
The vulnerability of the sorting function in the library for viewing, creating, and editing DjVu files, related to an uncontrolled recursion, allows a hacker to cause service failures.
The vulnerability of the sorting function in the library for viewing, creating, and editing DjVu files in DjVuLibre is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability in the Google Chrome web browser, related to the ICU library for handling Unicode, allows a malicious actor to repeatedly release memory, enabling them to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in the Google Chrome web browser, related to the ICU Unicode library, involves repeated memory release. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures through a specially created HTML pa...
The vulnerability of the XML object encoding function in the Libxml2 library, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of XML object encoding functions in the Libxml2 library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...
The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files, related to the execution of a loop with an unreachable exit condition, allows attackers to cause service failures.
The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files in DjVuLibre lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...