4558 matches found
Linux Kernel Pointer Arithmetic DoS
The vulnerability of Linux operating system kernels is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...
Ruby on Rails Module Delegation Heap Buffer Overflow DoS
The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform is related to the lack of a mechanism for managing code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...
Intel PROSet/Wireless WiFi utility Kernel Driver DoS
The vulnerability of the kernel driver of the Intel PROSet/Wireless WiFi utility lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Samba LDAP Resource Management DoS
The vulnerability of the Samba networking software’s LDAP server is related to a resource management mechanism error. Exploiting this vulnerability can allow an attacker to cause service failures...
Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit
This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service RRAS to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windo...
openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2021-374)
This update for java-180-openjdk fixes the following issues : - Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...
NX-OS LLDP DoS
The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
NVIDIA Control Panel Driver Privilege Escalation
The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause system failures or increase their...
libnvomx driver Heap Buffer Overflow Privilege Escalation
The vulnerability of the NVIDIA Tegra OpenMax driver library libnvomx relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...
RnaDaSvr.dll Heap Buffer Overflow DoS
The vulnerability of the CFTLDManager::HandleRequest function in the FactoryTalk Linx automation system software is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
An issue was discovered in the Linux kernel 3.2 through 5.10.16 as used by Xen. Grant mapping operations often occur in batch hypercalls where a number of operations are done in a single hypercall the success or failure of each one is reported to the backend driver and the backend driver then loops over the results performing follow-up actions based on the success or failure of each operation. Unfortunately when running in PV mode the Linux backend drivers mishandle this: Some errors are ignored effectively implying their success from the success of related batch elements. In other cases errors resulting from one batch element lead to further batch elements not being inspected and hence successful ones to not be possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and drivers/xen/gntdev.c.
...
Apache XmlGraphics Commons Server-Side Request Forgery Vulnerability
Apache XmlGraphics Commons is Apach open source a system library . Provides several reusable libraries. Apache XmlGraphics Commons 2.4 suffers from a server-side request forgery vulnerability that stems from the failure of XMPParser to properly validate inputs, which can be exploited by an attack...
Junos Routing Protocol Daemon DoS
The vulnerability of the Routing Protocol Daemon RPD in the Junos operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Node.js DoWrite DoS
The vulnerability of the DoWrite method implementation in the Node.js software platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects from a remote perspective...
Intel Ethernet I210 DoS
The vulnerability of Intel Ethernet I210 controller’s microprogramming software is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
.NET Core DoS
The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Microsoft Visual Studio software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Intel PROSet/Wireless WiFi Connection Utility Information Disclosure
The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
Intel SGX Platform DoS
The vulnerability of Intel SGX Platform’s microprogramming software for Windows is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
SUSE-SU-2021:0533-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk fixes the following issues: - Update to version jdk8u282 icedtea 3.18.0 January 2021 CPU bsc1181239 Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...
DEBIAN-CVE-2021-26932
An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then...