Mozilla Firefox Denial of Service Vulnerability (CNVD-2021-39257)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability, which can be exploited by remote attackers to cause the browser to crash...

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

CVE-2021-28202

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

CVE-2021-28194

The specific function in ASUS BMC’s firmware Web management page Remote image configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28188

The specific function in ASUS BMC’s firmware Web management page Modify user’s information function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate th...

CVE-2021-28191

The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to a specific function not validating the length of a user-entered string. A remote attacker could exploit the...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a string entered by the user. A...

The vulnerability of the RemoteJavaScript service in the IBM QRadar SIEM system for incident collection and analysis allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the RemoteJavaScript service in the IBM QRadar SIEM system relates to the restoration of unreliable data in memory, resulting from deserialization. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure through a speciall...

The vulnerability of the TIFF-to-PDF conversion module in TIFF2PDF, a library from LibTIFF, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the TIFF-to-PDF conversion module in the LibTIFF library is related to incorrect processing of TIFF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created TIFF file...

The vulnerability of the GetNumWrongData() function (contrib/lips4/gdevlips.c) in the software suite for processing, converting, and generating Ghostscript documents allows a perpetrator to trigger a service failure.

The vulnerability of the GetNumWrongData function contrib/lips4/gdevlips.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the SPNEGO DNS-server BIND implementation allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the SPNEGO DNS-server BIND implementation lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the SpeechRecognizerImpl::Abort function in Google Chrome web browser allows a hacker to trigger a service failure.

The vulnerability of the SpeechRecognizerImpl::Abort function in Google Chrome web browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

CAJViewer suffers from a denial of service vulnerability

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a denial of service vulnerability that can be exploited by attackers to cause the program to crash...

USN-4744-1 openldap vulnerability

Pasi Saarinen discovered that OpenLDAP incorrectly handled certain short timestamps. A remote attacker could possibly use this issue to cause OpenLDAP to crash, resulting in a denial of service...

The vulnerability of the Get16m function in the jhead program for working with EXIF files allows a hacker to cause a service failure.

The vulnerability of the Get16m function in the jhead program for working with EXIF files is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted file...

CVE-2020-5023

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash due to excess resource consumption. IBM X-Force ID: 193659...

Code injection

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash due to excess resource consumption. IBM X-Force ID: 193659...

CVE-2020-5023

IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash due to excess resource consumption. IBM X-Force ID: 193659...

CVE-2021-22303

There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...