1372 matches found
The vulnerability of the _search component of the Elasticsearch search engine allows a hacker to trigger a service failure.
The vulnerability of the search component of the Elasticsearch search engine involves reading data beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a specially crafted API request remotely...
The vulnerability of the `read_50_controller_cap_complete` function in the BlueZ component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the read50controllercapcomplete function in the BlueZ component of the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pngimage.c component in the libpng library, which allows a hacker to cause a service failure.
The vulnerability of the pngimage.c component in the libpng library arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PNG file...
The vulnerability of the file_copystr function in func.sjw allows a attacker to cause a service failure.
The vulnerability of the filecopystr function in func.sjw, a utility for determining the type of given files, involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...
The vulnerability of the av1/av1_dx_iface.c component in the library that implements the AV1 codec of the Debian GNU/Linux operating system allows a perpetrator to trigger a service failure.
The vulnerability of the av1/av1dxiface.c component in the library that implements the AV1 codec in the Debian GNU/Linux operating system is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the pSize parameter (/userRpm/PingIframeRpm) in the microprogramming software for TP-Link TL-WR941ND allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the pSize parameter /userRpm/PingIframeRpm of the TP-Link TL-WR941ND router’s microprogramming software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Network component in Google Chrome allows a perpetrator to trigger a service failure or possibly cause other effects.
The vulnerability of the Google Chrome browser’s Network component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or potentially have other effects through a specially crafted HTML page...
The vulnerability of the “convert” command in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the ImageMagick console-based graphic editor’s “convert” command is related to the improper release of memory before deleting the last link. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...
The vulnerability of the close() function in the zfileoutput component of the OpenImageIO image processing library allows a attacker to cause a service failure.
The vulnerability of the close function in the zfileoutput component of the OpenImageIO image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...
The vulnerability of the CrashAlwaysIf function in the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu formats allows a perpetrator to trigger a service failure.
The vulnerability of the CrashAlwaysIf function in the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu formats processing documents by SumatraPDF is related to the copying of buffers without checking the size of the input data when processing text files first.txt and second.txt. Exploiting this...
The vulnerability of the GIMP graphic editor, related to deficiencies in handling exception states, allows a hacker to trigger a service failure.
The vulnerability of the GIMP graphic editor is related to deficiencies in handling exceptional states. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created XCF file...
The vulnerability of the ezxml_parse_str function in the ezXML XML document syntax analysis library allows a attacker to cause a service failure.
The vulnerability of the ezxmlparsestr function in the ezXML XML syntax analysis library is related to the exploitation of xml blind xpath injection. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created XML file...
The vulnerability of the Gunyah Resource Manager service on Android and Linux embedded platforms of Qualcomm devices allows a hacker to induce a service failure.
The vulnerability of the Gunyah Resource Manager service for Android and Linux embedded devices on Qualcomm systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure by sending specially crafted messages from the...
The vulnerability of the Base plugin (gst-plugins-base) in the Gstreamer multimedia framework allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.
The vulnerability of the Base plugin gst-plugins-base in the Gstreamer multimedia framework is related to insufficient protection of service data due to the lack of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
SAP SQL Anywhere 安全漏洞
SAP SQL Anywhere is a SAP-specific relational database management system from SAP, Germany. A security vulnerability exists in SAP SQL Anywhere, which originates from the ability to prevent legitimate users from accessing the service by crashing it...
The vulnerability of the WanDynamicIpV6CfgRpm component (/userRpm/WanDynamicIpV6CfgRpm.htm) in the TP-Link TL-WR940N router software allows a attacker to cause a service failure.
The vulnerability of the WanDynamicIpV6CfgRpm component /userRpm/WanDynamicIpV6CfgRpm.htm of the TP-Link TL-WR940N router software is related to the issue where an operation outside the buffer is performed when processing the ipStart parameter. Exploiting this vulnerability allows a remote attack...
Authentication flaw
Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...
Globalscape Enhanced File Transfer 缓冲区错误漏洞
Globalscape Enhanced File Transfer Globalscape EFT is a best-in-class Managed File Transfer MFT solution from Globalscape USA. A security vulnerability exists in Globalscape Enhanced File Transfer versions prior to 8.1.0.16 that stems from an out-of-bounds memory read issue that could cause the...
PT-2023-22460 · Fortra · Fortra Globalscape Eft
Name of the Vulnerable Software and Affected Versions: Fortra Globalscape EFT versions prior to 8.1.0.16 Description: The issue is related to a denial of service, where a compressed message that decompresses to itself can cause infinite recursion, leading to a service crash. Recommendations: For...
The vulnerability of the XCP Authentication service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) allows a perpetrator to cause a service failure.
The vulnerability of the XCP Authentication service in the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P system is related to insufficient validation of user input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a...