Siemens SCALANCE S Network Gateway Resource Exhaustion DoS

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to uncontrolled resource consumption exhaustion. Exploiting this vulnerability can allow a malicious actor to trigger service failures using specially created packets sent to port 443/tcp...

.NET Core DoS

The vulnerability of the .NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Linux drivers/spi/spi-dw.c DoS

The vulnerability of the drivers/spi/spi-dw.c component in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

Windows TLS DoS

The vulnerability of the TLS Transport Layer Security protocol implementation in Windows operating systems is related to insufficient input validation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2020-1113

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'...

Jackson-databind Unreliable Data Access DoS

The vulnerability of the Jackson-databind library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

Envoy Infinite Loop DoS

The vulnerability of the network programming environments Envoy and Istio is related to the entry into an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

Istio Infinite Loop DoS

The vulnerability of the Istio network software is related to entering an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

Apache Commons Compress Resource Management DoS

The vulnerability of the Apache Commons Compress file name encoding algorithm is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

HAProxy Improper Header Handling

The vulnerability of server software such as HAProxy stems from improper handling of HTTP headers during the conversion from HTTP/2 to HTTP/1. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

app Application::runExternalProgram Cross-platform Data Cleansing

The vulnerability of the Application::runExternalProgram function, located in app/application.cpp, in cross-platform BitTorrent clients like qBittorrent, is related to deficiencies in data cleaning measures at the management level. Exploiting this vulnerability could allow an attacker to gain...

systemd Use-After-Free

The vulnerability of the Linux systemd initialization process is related to an error in the handling of the queue after it is freed from memory. Asynchronous Polkit requests are executed when processing dbus messages. Exploiting this vulnerability allows an attacker to gain access to confidential...

Astra Linux Directory service EPP Management System Auth Bypass

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in obtaining the Samba domain name from the server in console mode. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failur...

Secure Boot Protocol Security Monitor XSS

The vulnerability of the security-monitor function in the Secure Boot protocol a part of the UEFI specification is related to an error in the display of ssh for the root user, when this protocol is not enabled for the user. Exploiting this vulnerability can allow a remote attacker to access...

Astra Linux Directory Service EPW management system Resource Exhaustion DoS

The vulnerability of the Astra Linux Directory Service Management System ALD is related to the issue of multiple software executions. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Astra Linux Directory service EPW management system Buffer Overflow DoS

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error that causes operations to go beyond the memory limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Astra Linux Directory Service’s Data Compromise

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an initialization processing error. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

Google Chrome V8 Heap Buffer Overflow DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect implementation of the engine. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Google Chrome Confidential Data Access

The vulnerability of the Google Chrome multimedia browser component is related to a memory management flaw after memory is released. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Apache Tomcat Session Fixation

The vulnerability of the Apache Tomcat application server’s authentication mechanism is related to the lack of session fixation mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...