edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message

A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Connector/ODBC driver for MySQL Connectors in the Oracle Database Management System allows a hacker to gain access to read, modify, or delete data, or to cause service interruptions.

The vulnerability of the Connector/ODBC driver for MySQL Connectors in the Oracle MySQL database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, or delet...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component in the MySQL Database Management System is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures using the MySQL protocol...

The vulnerability of the command-line interface (CLI) of the Junos OS Evolved router operating system, allowing a attacker to cause a service failure

The vulnerability of the command-line interface CLI of the Junos OS Evolved router operating system QFX5000, where resources are not properly cleaned or released. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of specified input types. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the usb_string_copy() function in the Linux operating system’s USB driver allows a hacker to induce a service failure.

The vulnerability of the usbstringcopy function in the drivers/usb/gadget/configfs.c file of the Linux kernel’s USB gadget driver relates to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the Microprogramming Software Subsystem of the Intel Converged Security and Manageability Engine (CSME) allows a perpetrator to trigger a service failure or increase their privileges.

The vulnerability in the Intel Converged Security and Manageability Engine CSME microprogramming subsystem is related to incorrect checking of the return value of a method or function. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV042, RV042G, RV320, and RV325 stems from the escape of operations beyond the buffer in memory, resulting from insufficient validation of input data during HTTP packet processing...

Vulnerability of the Server: Thread Pooling component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server: Thread Pooling component of the Oracle MySQL Server database management system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of web-servers of microprogramming software for devices such as SIMATIC CP, SIMATIC HMI, SIMATIC IPC, and SIMATIC WinCC Runtime Advanced DiagBase, as well as SIPLUS TIM, allows a perpetrator to cause service interruptions.

The vulnerability of web-servers of microprogramming software for SIMATIC CP, SIMATIC HMI, SIMATIC IPC, and SIMATIC WinCC Runtime Advanced DiagBase, as well as SIPLUS TIM, is related to errors in variable name assignments. Exploiting this vulnerability can allow attackers to cause system failures...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass through the gstrtspmediagetrates function inrtsp-media.c file. An attacker can disrupt service operations by sending a sequence of specially crafted hexstream requests. Remediation Upgrade gstreamer to version 1.28...

CVE-2024-50311

A denial of service DoS vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in o...

The vulnerability of the __libc_malloc component in the Virtuoso-opensource web application development platform allows a attacker to cause a service failure.

The vulnerability of the libcmalloc component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service failures using specially created SQL...

The vulnerability of the sinv_check_exp component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sinvcheckexp component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using network T3/IIOP protocols...