CVE-2022-20355

In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12...

PT-2022-14581 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to improper input validation in the PacProxyService.java, which could lead to a system service crash and result in a local denial of service. This requires User...

DEBIAN-CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel ConnMan version 1.41, which stems from the existence of a post-release reuse issue with WISPR, and can be exploited by an attack...

The vulnerability in the implementation of the driver /drivers/misc/pvpanic/pvpanic.c of the Linux operating system allows a intruder to cause a service failure.

The vulnerability in the driver /drivers/misc/pvpanic/pvpanic.c of the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an unprivileged intruder to cause a service failure by executing the cat command with a specially crafted...

The vulnerability of the cursor_alloc() function in the QEMU hardware emulation software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the cursoralloc function in the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the Red Database database management system lies in the improper checking of the return value of a function, which allows an attacker to trigger a service failure.

The vulnerability of the Red Database database management system is related to incorrect checking of the return value of a function. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS, Cisco IOS XE, and Cisco IOS XR operating systems allows a attacker to cause service failures or execute arbitrary code.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS, Cisco IOS XE, and Cisco IOS XR systems arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2022-60075)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from a boundary error when processing untrusted input. An attacker could...

Envoy Resource Management Error Vulnerability (CNVD-2022-82667)

Envoy is an open source distributed proxy server. versions prior to Envoy 1.22.1 are vulnerable to a resource management error, which stems from the fact that it is insecure to redirect requests with body text or trailers within Envoy, and an attacker could exploit the vulnerability to crash the...

Contributor License Agreement assistant 安全漏洞

Contributor License Agreement assistant CLA assistant is a Javascript-based contributor agreement management software from the cla-assistant team that integrates with Github. The software provides the ability to ask contributors to sign a CLA when they pull code. The Contributor License Agreement...

The vulnerability of the Vim text editor’s append command allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Vim text editor’s append command relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created file...

The vulnerability of the DHCPv6 DNS-server implementation by Dnsmasq allows a attacker to cause a service failure.

The vulnerability of the DHCPv6 DNS-server implementation by Dnsmasq is related to a memory management error after memory is freed. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by sending specially crafted packets...

The vulnerability in the implementation of the vim_regexec_string() function in the Vim text editor allows a hacker to trigger a service failure.

The vulnerability of the vimregexecstring function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially crafted input data...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when creating HTTPS web requests while building X509 certificate chains. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users...

Ubuntu AccountsService 安全漏洞

Ubuntu AccountsService is an individual developer's software for managing accounts on Linux. The software provides query and manipulation functionality for accounts, plus a set of APIs based on commands such as useradd, usermod, and others. Ubuntu AccountsService suffers from a security...

CVE-2022-24434

This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes...

DEBIAN-CVE-2021-34085

Read access violation in the IIIdequantizesample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872. CVE-2017-14409, and...

The vulnerability of the GD library for the PHP programming language allows attackers to trigger a service failure.

The vulnerability of the GD library for the PHP programming language arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted call to the imagefilltoborder function...

The vulnerability of the sapi/fpm/fpm/fpm_log.c component, a PHP programming language interpreter, allows an attacker to disclose protected information or cause service failures.

The vulnerability of the sapi/fpm/fpm/fpmlog.c component, a PHP programming language interpreter, is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...