4560 matches found
MySQL InnoDB DoS
The vulnerability of the InnoDB component of the Oracle MySQL ServerL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the MySQL protocol...
MySQL InnoDB DoS
The vulnerability of the InnoDB component of the Oracle MySQL ServerL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the MySQL protocol...
Vulnerabilities fixed in Jackson databind
Debian has fixed vulnerabilities in Jackson databind. The vulnerabilities allow a malicious party to execute arbitrary code execute under user privileges and to obtain sensitive data. The vulnerabilities stem from the failure to adequately validate user input prior to the deserialization of an...
Cisco IOS DoS
The vulnerability of the input processing function in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
USN-4144-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the XFS file system in the Linux kernel did not properly handle mount failures in some situations. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2018-20976 Benjamin Moody discovered that the XFS file system...
Astra Linux DoS
The vulnerability of the astra-sambadc component of the Astra Linux operating system is related to improper interaction with the “Kerberos” authentication program. Exploiting this vulnerability can allow a perpetrator to cause service failures...
fly-admin-service-se Component Data Compromise
The vulnerability of the fly-admin-service-se component in the FLY operating system’s working environment is related to an interpretation error in the DocumentRoot settings of the configuration files for Apache. Additionally, there is a lack of checks for installed mail packages. Exploiting this...
UriParser Integer Overflow DoS
The vulnerability of the UriParser parser is related to integer overflow in the uriComposeQuery or uriComposeQueryEx function due to uncontrolled multiplication operations. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its...
spice-gtk DoS
The vulnerability of the spice-gtk utility in the Astra Linux operating system is related to errors in the operation of USB devices when ilev-enabled is set in policykit. Exploiting this vulnerability can allow a perpetrator to cause service failures...
util-linux DoS
The vulnerability of the util-linux component in the Astra Linux operating system is related to improper handling of access to vfat mounted devices. Exploiting this vulnerability can allow an attacker to cause service failures...
Astra Linux Composite Manager DoS
The vulnerability of the Compton manager in the Astra Linux operating system is related to errors in multi-monitor configurations. Exploiting this vulnerability can allow an attacker to cause service failures...
VLC zlib_decompress_extra Confidential Data Access
The vulnerability of the zlibdecompressextra function in the VideoLAN VLC media player involves its use after decompression. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Astra Linux DoS
The vulnerability of the program for installing, updating, and removing software packages in the Astra Linux operating system is related to the correction of the update delay of packages. Exploiting this vulnerability can allow an attacker to cause service failures...
dpkg Privilege Escalation
The vulnerability of the dpkg utility in the Astra Linux operating system is related to the lack of a check for the privilege PARSECCAPINHERITINTEGRITY. This privilege ensures that the integrity of the current process is maintained during package installation. Exploiting this vulnerability allows...
fly-admin-ald-se Component Access Control DoS
The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux is related to incorrect configuration of security contexts when adding/removing users who are part of the administrator group. Exploiting this vulnerability allows a malicious actor to cause...
SEMA driver Privilege Escalation
The vulnerability of the SEMA driver for data collection in the Intel Computing Improvement Program is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose protected information, or cause service failures...
Moxa ioLogik 2542-HSPA Uncontrolled Resource Consumption
The vulnerability of the microprogrammed input/output module Moxa ioLogik 2542-HSPA and the Moxa Ioxpress Configuration Utility is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted packag...
HP Deskjet Printer Falsification Malfunction
The vulnerability of HP Deskjet printer’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to cause service failures or configuration violations of the device remotely...
NVIDIA GeForce Quadro Tesla Code Execution
The vulnerability of 3D vision software from NVIDIA’s GeForce, Quadro, and Tesla products is related to errors in link processing. Exploiting this vulnerability can allow attackers to execute arbitrary code, cause service failures, or gain increased privileges...
libnvomx driver NVIDIA Tegra OpenMax Privilege Escalation
The vulnerability of the libnvomx driver library for NVIDIA Tegra OpenMax is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service failures...