CVE-2021-20494

IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882...

The vulnerability in the array distribution of the library for working with PKCS P11-kit modules allows a hacker to cause a service failure.

The vulnerability in the array distribution of the library for working with PKCS P11-kit modules is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure through using calls like realloc or calloc...

CVE-2021-22365

There is an out of bounds read vulnerability in eSE620X vESS V100R001C10SPC200, V100R001C20SPC200, V200R001C00SPC300. A local attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of internal message, successful exploit may cause...

CVE-2021-20494

IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882...

CVE-2021-27626

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CMiniXMLParser::Parse which will...

CVE-2021-27623

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CXmlUtility::CheckLength which will...

The vulnerability of the k2dobj.dll library of the KOMPAS-3D 3D modeling system, related to the execution of operations outside the buffer boundaries in memory, allows attackers to cause system failures.

The vulnerability of the k2dobj.dll library in the KOMPAS-3D 3D modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to cause a service failure using a specially crafted CDW format file...

The vulnerability of the ksys2.dll library in the KOMPAS-3D 3D modeling system, which is related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the ksys2.dll library in the KOMPAS-3D three-dimensional modeling system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted CDW format file...

The vulnerability of the ngx_resolver_copy() function in the nginx server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ngxresolvercopy function in the nginx server is related to a single-byte offset error during the writing of the point symbol '.', 0x2E beyond the buffer limit. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending...

CAJViewer suffers from a denial of service vulnerability (CNVD-2021-41717)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A denial of service vulnerability exists in CAJViewer. An attacker can exploit this vulnerability to cause the program to crash...

Libwebp Buffer Overflow Vulnerability

Libwebp is a WebP image format encoding and decoding library . A buffer overflow vulnerability exists in Libwebp versions prior to 1.0.1, which stems from libwebp allocating too much memory when reading a file and can be exploited by an attacker to cause a service crash...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd (CNVD-2021-39296)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd (CNVD-2021-39299)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd (CNVD-2021-39298)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

Binary vulnerability in Century Star configuration software of Beijing Century Changqiu Technology Co. Ltd (CNVD-2021-39297)

Century Star is a PC-based HMI configuration software developed by Beijing Century Changqiu Technology Co. A binary vulnerability exists in the Century Star configuration software of Beijing Century Changqiu Technology Co., Ltd. that can be exploited by an attacker to send a well-constructed pack...

samba: Unprivileged user can crash winbind

A null pointer dereference flaw was found in Samba's winbind service. This flaw allows a local user to crash the winbind service, causing a denial of service. The highest threat from this vulnerability is to system availability...

CVE-2020-14354

A possible use-after-free and double-free in c-ares lib version 1.16.0 if aresdestroy is called prior to aresgetaddrinfo completing. This flaw possibly allows an attacker to crash the service that uses c-ares lib. The highest threat from this vulnerability is to this service availability...

BSA-2021-1490

Security Advisory ID : BSA-2021-1490 Component : Web Management Interface Revision : 1.1 The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An...

AZL-40943 CVE-2021-3502 affecting package avahi for versions less than 0.8-1

A flaw was found in avahi 0.8-5. A reachable assertion is present in avahishostnameresolverstart function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this...

USN-4924-1 dnsmasq vulnerabilities

It was discovered that Dnsmasq incorrectly handled certain wildcard synthesized NSEC records. A remote attacker could possibly use this issue to prove the non-existence of hostnames that actually exist. CVE-2017-15107 It was discovered that Dnsmasq incorrectly handled certain large DNS packets. A...