The vulnerability of the Array.pop method in Thunderbird email clients and Firefox and Firefox ESR browsers allows a hacker to trigger a service failure.

The vulnerability of the Array.pop method in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the lack of type checking when passing objects around. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Podman / Varlink Remote Code Execution

!/usr/bin/python -- coding: UTF-8 -- pickletime.py Podman + Varlink Insecure Config Remote Exploit Jeremy Brown jbrown3264/gmail @ Oct 2019 ------- Details ------- Podman is container engine / platform similar to Docker supported by RedHat and Fedora with Varlink being a protocol to exchange...

The vulnerability of the SIP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failure.

The vulnerability of the SIP protocol implementation in Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense FTD is related to errors in processing SIP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Raw Socket Transport function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s Raw Socket Transport function exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allows attackers to trigger a service failure.

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the input packet processing function in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the input processing function in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux is related to errors that cause significant time delays when opening a folder with the ELF filter enabled. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux is related to an error that causes a significant delay in opening a folder with the ELF filter enabled. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux is related to incorrect configuration of security contexts when adding/removing users who are part of the administrator group. Exploiting this vulnerability allows a malicious actor to cause...

CVE-2019-9420

In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481...

The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system, which allows a intruder to trigger a service failure.

The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system is related to errors in processing TCP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability of the sub-component “Pluggable Auth” of the MySQL Server component of the Oracle MySQL database management system: This feature allows attackers to cause a service failure.

Vulnerability of the Server sub-component: The Pluggable Auth component of the MySQL Server of the Oracle MySQL database management system is related to improper access control. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...

The vulnerability in the virtual remote connection service for microprogramming control devices of the BMC Supermicro family allows a hacker to gain full control over the device.

The vulnerability of the virtual remote connection service for Microprogramming Software Control Devices of Supermicro is due to insufficient security restrictions for critical management functions. Exploiting this vulnerability allows a malicious actor to gain full control over the device by...

The vulnerability of the NX-API network operating system in Cisco NX-OS routers allows a attacker to induce a service failure.

The vulnerability of the NX-API network operating system in Cisco NX-OS routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the network software SKS Keyserver and the GNU Privacy Guard (GnuPG) software for encrypting information and generating digital signatures arises from the lack of verification of host data in the certificates. This allows attackers to trigger a service failure.

The vulnerability of the network software SKS Keyserver and the information encryption and digital signatures generation programs of GNU Privacy Guard GnuPG is related to the lack of verification of host data in the certificates. Exploiting this vulnerability could allow a malicious actor to caus...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

The vulnerability of Web servers Embedthis GoAhead and Embedthis Appweb, related to HTTP request processing errors, allows attackers to trigger service interruptions.

The vulnerability of Embedthis GoAhead and Embedthis Appweb web servers is related to HTTP request processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Web servers Embedthis GoAhead and Embedthis Appweb, related to POST HTTP request processing errors, allows attackers to trigger a service failure.

The vulnerability of Embedthis GoAhead and Embedthis Appweb web servers is related to HTTP request processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the krb_parse_authz_data function in the SnAuthRPC module of the Secret Net Studio security system allows a hacker to trigger a service failure.

The vulnerability of the krbparseauthzdata function in the SnAuthRPC module of the Secret Net Studio security system is related to errors in buffer offset calculations, which lead to the displacement of uninitialized memory areas. Exploiting this vulnerability could allow a remote attacker to cau...

The vulnerability of the devs.c file in the Yubico libu2f-host library allows a hacker to trigger a service failure.

The vulnerability of the devs.c file in the Yubico libu2f-host library arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures due to incorrect analysis of the init respon...