Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 代码问题漏洞

An XML external entity injection vulnerability exists in Cybozu Remote Service, a remote service management software used by Cybozu Japan to access Cybozu's internal systems. An attacker could use this vulnerability to obtain information stored in the product...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 输入验证错误漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems by Cybozu Japan.Cybozu Remote Service is vulnerable to open redirects. The vulnerability can be exploited by remote attackers to redirect users to arbitrary websites and conduct phishing attacks...

Cybozu Remote Service 跨站请求伪造漏洞

A cross-site request forgery vulnerability exists in the Cybozu Remote Service management interface. A remote attacker can use this vulnerability to hijack the administrator's authentication and perform unintended actions...

Cybozu Remote Service 权限许可和访问控制问题漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a bypass vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to change the data in the management interface...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient input validation. This allows attackers to trigger service failures.

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the lzma_decompress_buf function in the stream.c component of the Lrzip compression algorithm allows a hacker to cause a service failure after the memory is released.

The vulnerability of the lzmadecompressbuf function in the stream.c component of the Lrzip compression program relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created compressed file...

The vulnerability of the Libvirt virtualization management library, related to authentication errors, allows a perpetrator to trigger a service failure.

The vulnerability of the Libvirt virtualization management library is related to the lack of authentication, allowing connections to only be set for read-only access. This means that libvirt waits for a response from the guest agent for a specified period of time. Exploiting this vulnerability...

The vulnerability of the IP Service Level Agreement (IP SLA) and the implementation of the Two-Way Active Measurement Protocol (TWAMP) in the Cisco IOS XR operating system allows a perpetrator to trigger a service failure.

The vulnerability of the IP Service Level Agreement IP SLA and the implementation of the Two-Way Active Measurement Protocol TWAMP in the Cisco IOS XR operating system is related to the absence of a reference to an active, dedicated resource. Exploiting this vulnerability can allow a malicious...

The vulnerability in the `parser_parse_function_statement` function of the `js-parser-statm.c` component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to trigger a service failure.

The vulnerability of the parserparsefunctionstatement function in the js-parser-statm.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform is related to incorrect comparisons. Exploiting this vulnerability could allow a remote attacker to cause a...

The vulnerability of the WAF engine for Apache ModSecurity, related to deficiencies in handling exceptional states, allows a attacker to trigger a service failure.

The vulnerability of the WAF engine for Apache ModSecurity is related to incorrect data processing in the form of key-value pairs. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of DNS-client TCP/IP clients of NicheLite and InterNiche allows a hacker to induce a service failure.

The vulnerability of DNS-client TCP/IP implementations like NicheLite and InterNiche involves an escape from the expected range of values for certain indicators. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP implementations allows a attacker to cause service failures.

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche protocols is related to an error in exception handling. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the implementation of the TCP checksum function for TCP/IP protocols such as NicheLite and InterNiche allows a attacker to cause a service failure.

The vulnerability of the TCP checksum implementation in the TCP/IP protocols NicheLite and InterNiche is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of DNS-client TCP/IP clients of NicheLite and InterNiche allows a hacker to induce a service failure.

The vulnerability of TCP/IP client applications of NicheLite and InterNiche lies in errors during the processing of input data length parameters. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the RouterOS operating system’s /ram/pckg/security/nova/bin/ipsec process, allowing a hacker to trigger a service failure

The vulnerability of the /ram/pckg/security/nova/bin/ipsec” function in the RouterOS operating system is related to the use of the “assert” or similar operator. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

ROS-2-2219

2.2219 Apache Ant utility vulnerability CVE-2021-36374, CVE-2021-36373 1. Vulnerability Description: CVE-2021-36374 A vulnerability in the Apache Ant utility, is related to the application improperly controlling internal resource consumption when processing ZIP archives. Exploitation of the...

Fortinet FortiSandbox 输入验证错误漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. An input validation error vulnerability exists in Fortinet FortiSandbox, which...