4544 matches found
GHSA-6W7G-P4JH-RF92 "Verify All" Returns Success Despite Validation Failures in Singularity
Impact The --all / -a option to singularity verify returns success even when some objects in a SIF container are not signed, or cannot be verified. The SIF objects that are not verified are reported in WARNING log messages, but a Container Verified message and exit code of 0 are returned. Workflo...
Relay races, batons, and techniques: How to improve your cloud security posture
In 2008, the US 4x100m relay team was the favorite to win the gold medal at the Beijing Olympics. Not a massive surprise, considering that team included the second fastest athlete in history, Tyson Gay. It was a great shock though when the team blundered on the last exchange, dropping the baton,...
The vulnerability of the Adobe Bridge file manager, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of the Adobe Bridge file manager is related to the assignment of the null pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the dname_pkt_copy function in the DNS server Unbound, allowing a hacker to cause a service failure
The vulnerability of the dnamepktcopy function in the Unbound DNS server is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...
GSD-2021-1002598 btrfs: free exchange changeset on failures
btrfs: free exchange changeset on failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...
The vulnerability of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.
The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerabilities of the TwinCAT OPC UA Server and IPC Diagnostics UA Server stem from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the TwinCAT OPC UA Server and IPC Diagnostics UA Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the “New Tab Page” component in Microsoft Edge and Google Chrome browsers allows a perpetrator to influence the accessibility of data or cause service failures.
The vulnerability of the “New Tab Page” component in Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to influence the accessibility of data or cause service failures...
PT-2021-6876
Name of the Vulnerable Software and Affected Versions OpenSSL version 3.0.0 OpenSSL versions prior to 3.0.1 Description The issue is related to the mishandling of internal errors by the X509 verify cert function in OpenSSL. This function may return a negative value to indicate an internal error,...
The vulnerability of the HarmonyOS operating system’s kernel arises from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of UniFi switch microprogramming software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software of UniFi switches is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the Android EMUI operating system’s shell, which arises due to insufficient validation of input data, allows a hacker to disclose protected information or cause service failures.
The vulnerability of the Android EMUI operating system’s shell exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) relates to uncontrolled resource consumption, allowing attackers to cause service failures.
The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to an uncontrolled resource consumption. Exploiting this...
The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) relates to uncontrolled resource consumption, allowing attackers to cause service failures.
The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway is related to uncontrolled resource consumption. Exploiting this vulnerability c...
The vulnerability of the TCP/IP protocol implementation in the Microsoft Windows operating system allows a perpetrator to cause a service failure.
The vulnerability of the TCP/IP protocol implementation in the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted input data to the application...
The vulnerability of the HarmonyOS operating system’s kernel arises from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the FreeRDP remote desktop protocol lies in the reading beyond the permissible buffer data limit. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data from the buffer beyond its allowable limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the dynamic configuration server’s RPC ports, RPCbind, arises from the unlimited distribution of resources, allowing attackers to cause service failures.
The vulnerability of the dynamic configuration server for RPC ports, RPCbind, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability in the socket implementation of the Microsoft Windows operating system allows a hacker to cause a service failure. [source-iocs-preserved const=AF_UNIX]
The vulnerability of the socket implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending specially crafted input data to the application...
The vulnerability of the rdata_copy function in the Unbound DNS server allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the rdatacopy function in the Unbound DNS server relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...