1373 matches found
Cross site request forgery (csrf)
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
CVE-2021-27792
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
CVE-2021-27792
CVE-2021-27792 affects Brocade Fabric OS with a flaw in the web management interface: input validation failure for malformed requests can crash the FOS HTTP application handler, causing a DoS and reboot requirement. Affected products include Brocade Fabric OS versions before 9.0.1a, 8.2.3a, and 7...
CVE-2021-27792
The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to...
The vulnerability of the HTTP/2 implementation of the mod_http2 module in the Apache HTTP Server allows a attacker to cause a service failure.
The vulnerability of the HTTP/2 implementation of the modhttp2 module in the Apache HTTP Server is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted request...
F-secure Atlant 安全漏洞
F-secure Atlant is a platform for building applications that can scan and detect malicious files from the Finnish company F-Secure F-Secure. A security vulnerability exists in F-Secure Atlant. The vulnerability stems from the fact that the SAVAPI component may crash while scanning fuzzy files...
The vulnerability of Google Chrome’s GPU graphics processor allows a hacker to trigger a system failure or execute arbitrary code.
The vulnerability of Google Chrome’s GPU graphics processor is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code using a specially created malicious web page...
The vulnerability of Google Chrome’s navigation mechanism, related to the use of memory after it is freed, allows a hacker to gain access to confidential information or cause a service failure.
The vulnerability of Google Chrome’s navigation mechanism is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...
The vulnerability of the Blink engine in Google Chrome browsers, related to the use of memory after it is released, allows attackers to access confidential information or cause service failures.
The vulnerability of the Blink engine in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential information or cause service failures...
The vulnerability of the cil_reset_classpermission() function in the SELinux access control system allows a perpetrator to trigger a service failure.
The vulnerability of the cilresetclasspermission function in the SELinux access control system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the EbmlTypeDispatcher::send function in the VLC Media Player, related to writing beyond the buffer boundary, allows an attacker to access confidential information or cause a service failure.
The vulnerability of the EbmlTypeDispatcher::send function in the VLC Media Player lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to gain access to confidential information or cause service failures...
The vulnerability of the relay_open function in the kernel/relay.c file of the Linux operating system, related to pointer arithmetic errors, allows attackers to cause a service failure.
The vulnerability of the relayopen function in the kernel/relay.c file of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `refill` function in the `ImfFastHuf.cpp` component of the software for storing OpenEXR images with a wide dynamic range of brightness levels. This vulnerability arises from the operation of writing data beyond the buffer boundaries in memory, allowing an attacker to cause a service failure.
The vulnerability of the refill function in the ImfFastHuf.cpp component of the software for storing OpenEXR images with wide dynamic range of brightness values is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cau...
The vulnerability of the MagickCore/gem-private.h component of the console-based image editing tool ImageMagick, related to division by zero, allows a hacker to cause a service failure.
The vulnerability of the MagickCore/gem-private.h component in the console-based image editing tool ImageMagick is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...
The vulnerability of the OptimizeLayerFrames function in the MagickCore/layer.c component of the console image editing tool ImageMagick, related to division by zero, allows a hacker to trigger a service failure.
The vulnerability of the OptimizeLayerFrames function in the MagickCore/layer.c component of the ImageMagick console graphics editor involves division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec, which is related to infinite loop execution, allows attackers to cause a service failure.
The vulnerability of the WavpackPackInit function in the packUtils.c component of the WavPack audio codec is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created WAV audio file...
The vulnerability of the WriteOnePNGImage() function in the ImageMagick console graphics editor’s coders/png.c component allows a attacker to cause a service failure by reading data beyond the allowed buffer limits.
The vulnerability of the WriteOnePNGImage function in the ImageMagick console graphics editor’s coders/png.c file is related to an incorrect condition for exiting a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...
The vulnerability of the AnnotRichMedia::Content::Content function in the Annot.cc component of the Poppler PDF rendering library, related to the assignment of a null pointer, allows an attacker to trigger a service failure.
The vulnerability of the AnnotRichMedia::Content::Content function in the Annot.cc component of the Poppler PDF rendering library is related to the use of a null pointer. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created PDF document...
The vulnerability of the DrawGetStrokeDashArray function in the wand/drawing-wand.c component of the ImageMagick console graphics editor allows a attacker to cause a service failure by manipulating the zero pointer.
The vulnerability of the DrawGetStrokeDashArray function in the wand/drawing-wand.c component of the ImageMagick console graphics editor is related to the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created image file...
The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the console image editing tool ImageMagick, which is related to infinite loop execution, allows a hacker to cause a service failure.
The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially creat...