Cisco IOx Application Denial of Service Vulnerability

Cisco Iox is the U.S. Cisco Cisco a combination of Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications for secure development environment. The Cisco IOx Application Framework's Cisco 809 Industrial Integrated Services Routers Industrial ISRs, Cisco 829...

Samba ldb_wildcard_compare Buffer Overflow DoS

The vulnerability of the ldbwildcardcompare function in the Samba networking software package is related to a number processing error. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Information Disclosure

firefox is vulnerable to information disclosure. The vulnerability exists due to an error when processing a redirect with a conflicting Referrer-Policy. The browser adopts redirect's Referrer-Policy, which may result in disclosure of more information than intended by the original origin...

CVE-2021-25141

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

CVE-2021-25141

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

CVE-2021-25141

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

CVE-2021-25141: Undefined Security Weakness

A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...

VMware Carbon Black Cloud Memory Object Processing

The vulnerability of the VMware Carbon Black Cloud for MacOS installer is related to errors in memory object processing. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-11327)

ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. ImageMagick suffers from a security vulnerability, which stems from IntensityCompare of /magick/quantize.c, where a call to PixelPacketIntensity returns an...

Network Management System REST API File Re-record

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to errors in processing input data. Exploiting this vulnerability allows an attacker to re-record any files on the device remotely...

Network Management System REST API Access Disclosure

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

CVE-2020-3565

A vulnerability in the TCP Intercept functionality of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Access Control Policies including Geolocation and Service Polices on an affected system. The vulnerability exists because TCP...

ASP.NET Core DoS

The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending specially crafted requests to the ASP.NET Core application...

Connected User Experience Telemetry Service Windows DoS

The vulnerability of the Connected User Experience and Telemetry Service services of Microsoft Windows lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created application...

Astra OpenVPN Server DoS

The vulnerability of the astra-openvpn-server administration system is related to a data processing error. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures by modifying the default file save path...

fly-fm File Manager DoS

The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...

OSV-2020-1536 Segv on unknown address in GetValueFromLinkedList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20923 Crash type: Segv on unknown address Crash state: GetValueFromLinkedList Magick::throwException Magick::Image::read...

PT-2020-3186 · Microsoft · Windows Address Book +1

Name of the Vulnerable Software and Affected Versions: Windows Address Book affected versions not specified Description: A remote code execution issue exists due to improper processing of vcard files by Windows Address Book WAB. An attacker can exploit this by sending a malicious vcard file that...

Windows Media Foundation Privilege Escalation

The vulnerability of the Windows Media Foundation component in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability allows a malicious actor to remotely install programs, view, modify, delete data, or create new user accounts with full user...

OpenOffice.org vclmi.dll Vulnerable

The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...