EUVD-2014-3886

Malware in sbrugna...

Airflow Code Execution

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

Spring Framework Code Execution

The vulnerability of the Spring Framework configuration for microprogramming sensors for monitoring Keysight N6841A RF devices, as well as the microprogramming software for geolocation systems from Keysight N6854A, lies in the recovery of unreliable data structures in memory. Exploiting this...

Apache Commons Collections Cisco Software Unreliable Data Structure

The vulnerability of Apache Commons Collections and Cisco’s software products lies in the rehydration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

MC Works64/MC Works32 FrameWorX server Platform Services GenBroker64/GenBroker32 DoS

The vulnerabilities of the software packages for supervisory control and data collection MC Works64/MC Works32, the FrameWorX server, the centralized configuration environment for HMI-/SCADA applications, the Platform Services software platform, and the GenBroker64/GenBroker32 application for...

packages for monitoring and Code Execution

The vulnerabilities of the software packages for supervisory control and data collection, MC Works64/MC Works32, the FrameWorX server, the centralized configuration environment for HMI-/SCADA applications, the Platform Services software platform, and the GenBroker64/GenBroker32 application for...

Cisco Small Business RV016 Code Execution

The vulnerability of the microprogrammed software of Cisco Small Business RV016, Cisco Small Business RV042, Cisco Small Business RV042G, and Cisco Small Business RV082 lies in the recovery of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker operating...

Bouncy Castle Heap Buffer Overflow DoS

The vulnerability of the Bouncy Castle cryptographic protection lies in the recovery of unreliable data structures in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created personal key...

NumPy Code Execution

The vulnerability of the NumPy module for Python is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

ColdFusion Memory Execution

The vulnerability of the ColdFusion software platform lies in the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created query...

WebDMServlet Code Execution

The vulnerability of the WebDMServlet component in the HPE Intelligent Management Center PLAT software platform is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

OpenSSH Shared Memory Manager Privilege Escalation

The vulnerability of the manager of shared memory in the sshd daemon of the OpenSSH cryptographic protection mechanism arises from the execution of an operation beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges by...