SAP HANA Extended Application Services XML Processing

The vulnerability of the SAP HANA Extended Application Services development tool is related to errors in processing XML documents. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures by using a specially created XML file...

Intel Graphics Driver Kernel Mode Driver DoS

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

Rapid Storage Technology Enterprise Privilege Escalation

The vulnerability of the Rapid Storage Technology Enterprise data storage technology implementation is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service failures...

XFS Heap Buffer Overflow DoS

The vulnerability of the xfsattrshortformaddname function in the XFS file system implementation of Linux operating systems is related to incorrect data processing. Exploiting this vulnerability can allow an attacker to cause service failures...

Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability

Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...

Libextractor Heap Buffer Overflow DoS

The vulnerability of the processmetadata function in the GNU Libextractor library is related to the issue of reading beyond the memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...

Live555 Media Server Heap Buffer Overflow DoS

The vulnerability of the readSocket function in the GroupsockHelper.cpp library of the Live555 Media Server package from the liblivemedia library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

libsolv Pointer Dereferencing DoS

The vulnerability of the testcaseread function in the libsolv library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Active Management Technology Remote Access DoS

The vulnerability of the Active Management Technology remote access implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SAP Fiori Client DoS

The vulnerability of the SAP Fiori Client mobile environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending empty push notifications remotely...

openSUSE Security Update : mailman (openSUSE-2019-495)

This update for mailman to version 2.1.27 fixes the following issues : This security issue was fixed : - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed : - The hash generated when...

HECI Subsystem DoS

The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services SPS is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Nginx Unit Buffer Overflow DoS

The vulnerability of the Nginx Unit application server arises from overflowing buffers in dynamic memory. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially crafted request...

GlusterFS snprintf Buffer Overflow DoS

The vulnerability of the snprintf function in the GlusterFS file system is related to the use of an uncontrolled format string. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

LibTIFF Heap Buffer Overflow DoS

The vulnerability of the TIFFWriteDirectorySec function tifdirwrite.c in the LibTIFF library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted file...

Cisco Fabric Services DoS

The vulnerability of the Cisco Fabric Services component for NX-OS operating systems on Cisco devices exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Moxa EDS DoS

The vulnerability of the microprogramming software of Moxa EDS-405A, Moxa EDS-408A, and Moxa EDS-510A devices is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created...

CVE-2017-2659

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts...

Cisco Webex Teams iOS Client Data Compromise

The vulnerability in the iOS client application of the Cisco Webex Teams collaboration software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information or cause service failures...

LibTIFF Integer Overflow Data Compromise

The vulnerability of the multiplyms function in the LibTIFF library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to access confidential information or cause service failures...