4558 matches found
Bash Pointer Arithmetic DoS
The vulnerability of the Bash command shell is related to errors due to incorrect command sequencing. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...
xauth Process Input Validation
The vulnerability in the process.c file of the xauth user authentication software is related to insufficient validation of input data when using strncpy in the doadd function. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...
Systemd Heap Buffer Overflow DoS
The vulnerability of the alloca and strdup functions in the Systemd initialization and service management subsystem is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...
Postmortem on U.S. Census Hack Exposes Cybersecurity Failures
Threat actors exploited an unpatched Citrix flaw to breach the network of the U.S. Census Bureau in January in an attack that was ultimately halted before a backdoor could be installed or sensitive data could be stolen, according to a report by a government watchdog organization. However,...
Live555 安全漏洞
Live555 is a cross-platform C++ open source project that provides a solution for streaming media and implements support for standard streaming media transport protocols such as RTP/RTCP, RTSP, SIP, and others. A security vulnerability exists in Live555, which stems from liveMedia/FramedSource.cpp...
Firefox Thunderbird Confidential Data Access DoS
The vulnerability in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird relates to the handling of embedded list items as block-level elements. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servic...
Essbase Analytic Provider Services DoS
The vulnerability of the Essbase Analytic Provider Services web component is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2021-3048
Certain invalid URL entries contained in an External Dynamic List EDL cause the Device Server daemon devsrvr to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall...
D-Link Router Web Interface Code Execution
The vulnerability of the web interface of D-Link router microprogramming software, such as D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to...
Huawei EulerOS: Security Advisory for openldap (EulerOS-SA-2021-2277)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2021-38155
OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking related to PCI DSS features. By guessing the name of an account and failing to authenticate multiple times, any unauthenticated...
Auditors: Feds’ Cybersecurity Gets the Dunce Cap
Out of eight U.S. federal agencies identified two years ago with critical cybersecurity failures, seven still don’t meet basic standards, a new audit report found. The Federal government’s overall posture was given just a C-. Audited agencies included the Departments of State, Homeland Security,...
Google Chrome V8 DoS
The vulnerability of the JavaScript script handler in Google Chrome’s browser is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Adobe Animate Buffer Overflow DoS
The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...
Oniguruma Heap Buffer Overflow DoS
The vulnerability of the gb18030mbcenclen function in the Oniguruma regular expression library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Adobe After Effects Null Pointer DoS
The vulnerability of Adobe After Effects software for video and dynamic image editing is caused by a pointer issue. Exploiting this vulnerability can allow an attacker to cause service failures...
Apache Traffic Server HTTP/2 Module DoS
The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
cPython HTTP Request Processing
The vulnerability of the cPython programming language in Python is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...
Apache Ant Uncontrolled Resource Consumption DoS
The vulnerability of the Apache Ant build automation tool is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
zip file memory leak DoS
The vulnerability of zip file compression software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...