4559 matches found
Check Point Security Gateway DoS
The vulnerability of Check Point Security Gateway’s security gateway is related to deficiencies in handling exceptional states when the Threat Prevention Forensics feature is enabled. Exploiting this vulnerability can allow a malicious actor to cause service failures...
SAP Commerce Cloud Access Control DoS
The vulnerability of the SAP Commerce Cloud e-commerce platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...
openSUSE: Security Advisory for squid (openSUSE-SU-2019:2541-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei micro-programmed routing software Resource Leak DoS
The vulnerability of Huawei’s microprogrammed router software relates to the inability to release resources after the expiration of their useful lifespan. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
YAML Syntax Analyzer DoS
The vulnerability of the YAML syntax analyzer library used in Kubernetes cluster management software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Intel NUC Kit Buffer Overflow DoS
The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause system failures, or gain unauthorized access to protected information...
Intel NUC Kit Buffer Overflow DoS
The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause system failures, or gain unauthorized access to protected information...
NTPsec Buffer Overflow DoS
The vulnerability of the NTPsec network time protocol lies in the writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures through an improperly formulated configuration request...
Jackson-databind P6DataSource Information Disclosure
The vulnerability of the P6DataSource component in the Jackson-databind library of the FasterXML project is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information or cause service failures...
Marvell WiFi Kernel Driver Heap Buffer Overflow DoS
The vulnerability of the addierates function in the Marvell WiFi kernel driver for Linux operating systems is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service...
Jackson-databind SharedPoolDataSource Information Disclosure
The vulnerability of the SharedPoolDataSource and PerUserPoolDataSource components of the Jackson-databind library in the FasterXML project is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...
VMware Workstation/Fusion DoS
The vulnerability of VMware Workstation and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted IPv6 packet...
SimpleSAMLphp Sensitive Data Access Data Compromise
The vulnerability of the SAML 2.0 SimpleSAMLphp implementation is related to improper verification of cryptographic signatures in XML messages. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
bird Buffer Overflow DoS
The vulnerability in the packet routing protocol implementation in Unix-like operating systems, bird, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
OPENSUSE-SU-2019:2687-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk jdk8u232/icedtea 3.14.0 fixes the following issues: Security issues fixed bsc1154212: - CVE-2019-2933: Windows file handling redux - CVE-2019-2945: Better socket support - CVE-2019-2949: Better Kerberos ccache handling - CVE-2019-2958: Build Better Processes -...
Finding a common language to describe AI security threats
As artificial intelligence AI and machine learning systems become increasingly important to our lives, it’s critical that when they fail we understand how and why. Many research papers have been dedicated to this topic, but inconsistent vocabulary has limited their usefulness. In collaboration wi...
libcurl Memory Reallocation DoS
The vulnerability of the FTP protocol implementation that supports Kerberos authentication, when using the libcurl library, is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...
Intel BMC Session Management Disclosure DoS
The vulnerability of the microprogrammed software of the Intel Baseboard Management Controller BMC relates to session management errors. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause system failures...
Firefox Thunderbird ECDH DoS
The vulnerability of the p256-ECDH key generation function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Intel Graphics Driver Kernel Mode DoS
The vulnerability of the Kernel Mode module in the Intel Graphics Driver exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...