1410 matches found
PT-2018-3022 · Mysql Server +4 · Mysql Server +4
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.21 and earlier Description: The issue is related to insufficient access control in the InnoDB component of MySQL Server, allowing a remote attacker to cause a denial of service. Successful exploitation can result in...
The vulnerability of the png_set_text_2 function in the libpng library, which allows a hacker to cause a service failure
The vulnerability of the pngsettext2 function in the libpng library is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by loading a fragment of text into the PNG structure, removing the text, and then adding another tex...
CVE-2017-17199
Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323...
CVE-2018-7583
Proxy.exe in DualDesk 20 allows Remote Denial Of Service daemon crash via a long string to TCP port 5500...
CVE-2017-17292
Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...
The vulnerability of the MediaServer.exe executable of the ALLPlayer/ALLMediaServer DLNA server allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the MediaServer.exe executable of the DLNA server ALLPlayer ALLMediaServer is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by sending a specially crafted string to the TCP port 888...
The vulnerability of the qmi_wwanbind function (drivers/net/usb/qmi_wwan.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.
The vulnerability of the qmiwwanbind function drivers/net/usb/qmiwwan.c in the Linux kernel arises due to errors during the execution of the zero-division operation. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects by using a specially crafted US...
The vulnerability of the try_read_command function (memcached.c) in the memcached data caching software allows a attacker to cause a service failure.
The vulnerability of the tryreadcommand function in the memcached.c library lies in the fact that the operation is executed outside of the buffer in memory. Exploiting this vulnerability allows an attacker, operating locally, to cause a service failure segmentation fault by using a specially...
The vulnerability of the Vim text editor lies in the use of memory after it is freed, allowing a hacker to trigger a service failure.
The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure by creating a specially crafted file with the -S flag...
CVE-2017-15322
Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could...
Input validation
Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could...
The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure or cause other adverse effects.
The vulnerability of the Linux operating system’s kernel drivers/media/usb/dvb-usb-v2/lmedm04.c is related to the lack of checks on connected devices during the “warm start” phase of the system, as well as incorrect time binding dm04lme2510frontendattach and dm04lme2510tuner. Exploiting this...
Buffer Overflow Vulnerability in SIP Backup Module for Multiple Huawei Products
Huawei DP300 and so on are products of Huawei, China.Huawei DP300 is a video conferencing end device.IPS Module is an intrusion prevention module.SIP backup is one of the SIP backup modules. A buffer overflow vulnerability exists in the SIP backup module in multiple Huawei products due to the...
The vulnerability of the OpenSMTPD mail daemon on the Fedora operating system allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the OpenSMTPD mail daemon in the Fedora operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using the structures reqcavrfysmtp, reqcavrfymta, and...
The vulnerability of the ExtrFile and stricomp functions (unrarlib.c) of the unrar-free or unrar-gpl package, a file decompression tool for UnRAR, allows a hacker to bypass the catalog and trigger a service failure.
The vulnerability of the ExtrFile and stricomp functions unrarlib.c in the unrar-free or unrar-gpl package, a tool for decompressing UnRAR files, arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to bypass the...
The vulnerability of the _isBidi function in the (bidi.c) library of Libidn2, which allows a hacker to cause a service failure or exert other effects.
The vulnerability of the isBidi function in the bidi.c library from Libidn2 is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures or other adverse effects...
CVE-2017-14023
An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators...
The vulnerability of the DNS server Dnsmasq, caused by overflowing buffer in the stack, allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Dnsmasq DNS server arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to cause a service failure or execute arbitrary code using a specially crafted DHCPv6 request...
SUSE-SU-2017:2449-1 Recommended update for apache2
This update for apache2 provides the following fixes: Security issues fixed: CVE-2017-9788: The value placeholder in Proxy-Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by modauthdigest. Providing an initial key with no '='...
A vulnerability in the Linux operating system’s net/ipv4/route.c file, which allows an attacker to cause a service failure or exert other effects.
The vulnerability in the Linux operating system’s net/ipv4/route.c code is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker acting locally to trigger a service failure dereferencing the null pointer or cause other effects through system calls...