272 matches found
The vulnerability of the Android operating system, which allows a hacker to trigger a service failure
The vulnerability of the Android operating system’s libc library is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions device freezing and reboots using a specially crafted file...
The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the resolveImplicitLevels function in the implementation of the Unicode Bidirectional Algorithm of the International Components for Unicode library is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures o...
The vulnerability of the VMware Workstation hypervisor allows users of the guest operating system to trigger a failure in the service provided by the host operating system.
The vulnerability of the TPView.dll library in VMware Workstation involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...
The vulnerability of VMware Workstation’s hypervisor allows users of the guest operating system to execute code on the host operating system.
The vulnerability of the TPInt.dll library in VMware Workstation involves resource management errors. Exploiting this vulnerability allows users of the guest operating system to execute code on the host operating system...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libnetpbm10-dev package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of VMware Workstation’s hypervisor allows users of the guest operating system to trigger a failure in the maintenance of the host operating system.
The vulnerability of the TPInt.dll library in VMware Workstation involves resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...
The vulnerability of Juniper SRX 240 router microprogramming software allows a attacker to bypass the CSRF protection of the J-Web interface.
The Juniper SRX 240 router software contains a vulnerability in the Sajax AJAX library, which stems from the lack of checking the “csrftoken” parameter for GET requests...
The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability exists in the NSS Network Security Services library of Mozilla, applicable to Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird, Mozilla SeaMonkey, Google Chrome, and Google Chrome OS. It stems from improper handling of ASN.1 values in X.509 certificates. Exploiting this...
The vulnerability of the Android operating system, which allows a hacker to trigger a service failure
The vulnerability of the Minikin operating system’s library exists due to the lack of checks for negative values of the font property. Exploiting this vulnerability could allow a local attacker to cause a service failure memory corruption using a specially crafted font...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the include/core/SkPostConfig.h function in the Skia graphics library of the Systemserver operating system in Android is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges including crashing the...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms
The vulnerability of the libstagefright library in the Android operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms using specially crafted Bitstre...
The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.
The vulnerability of the Libc library component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause partial service interruption...
Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures
The vulnerability of the TRE library in Libc-based iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...
The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure
The vulnerability of the ssl3getnewsessionticket function in the OpenSSL library is related to errors in shared access to a common resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by manipulating the SessionTicket object...
DEBIAN-CVE-2015-1270
The ucnviogetConverterName function in common/ucnvio.cpp in International Components for Unicode ICU, as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service read of uninitialized memory or...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libopenssl100-32bit package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the openssl package up to version 0.9.8d of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
PHP GD GetCode_Denial of Service Vulnerability
PHP is a popular programming language. The GetCode function in gdgifin.c in PHP GD fails to properly handle GIF images, allowing remote attackers to exploit the vulnerability to construct malicious files that can be parsed by the user, which can be used in denial of service or arbitrary code...
Debian DSA-2868-1 : php5 - denial of service
It was discovered that file, a file type classification tool, contains a flaw in the handling of 'indirect' magic rules in the libmagic library, which leads to an infinite recursion when trying to determine the file type of certain files. The Common Vulnerabilities and Exposures project ID...
libjpeg: information leak (read of uninitialized memory)
The getdht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table DHT JPEG markers, which allows remote...