The vulnerability of the ishtp_cl_get_dma_send_buf() function in the driver of the Integrated Sensor Hub (ISH) for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the ishtpclgetdmasendbuf function in the Linux operating system’s Integrated Sensor Hub ISH driver lies in pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nft_set_lookup_global() function in the Netfilter subsystem of Linux operating systems allows a hacker to increase their privileges and cause a service failure.

The vulnerability of the nftsetlookupglobal function in the Netfilter subsystem of Linux operating systems is related to the use of memory after it is freed during packet processing. Exploiting this vulnerability can allow an attacker to enhance their privileges and cause service interruptions...

Vulnerability of the extractContigSamples32bits() function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the extractContigSamples32bits function in the LibTIFF library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure using specially created data...

PT-2023-25883 · Smartisoft · Smartbpm.Net

Name of the Vulnerable Software and Affected Versions: SmartSoft SmartBPM.NET affected versions not specified Description: The issue is related to the use of a hard-coded machine key in SmartSoft SmartBPM.NET. This allows an unauthenticated remote attacker to send a serialized payload to the...

The vulnerability of the VirtualServerRpm component (/userRpm/VirtualServerRpm.htm) of TP-Link routers such as TL-WR940N, TL-WR841N, TL-WR941N, and TL-WR740N allows a hacker to cause service interruptions.

The vulnerability of the VirtualServerRpm component /userRpm/VirtualServerRpm.htm of TP-Link routers such as TL-WR940N, TL-WR841N, TL-WR941N, and TL-WR740N lies in the fact that the operation outside the buffer in memory occurs when processing the Changed key parameter. Exploiting this...

The vulnerability of LISP traffic analyzer software in Wireshark allows a hacker to cause a service failure.

The vulnerability of the LISP analyzer in Wireshark for analyzing computer network traffic is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting a specific package or creating a capture file...

The vulnerability of the StackRot memory management subsystem in Linux kernel allows a attacker to escalate their privileges or cause service interruptions.

The vulnerability of the StackRot memory management subsystem in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges or cause service interruptions...

UBUNTU-CVE-2023-25523

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service...

The vulnerability of the TrueConf Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges and cause service failures.

The vulnerability of the TrueConf Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service interruptions...

The vulnerability of the Google Chrome browser extension allows a perpetrator to access confidential data, compromise its integrity, and also cause service interruptions.

The vulnerability of the Google Chrome browser extension is related to the overflow of the heap buffer and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions throug...

The vulnerability of the Google Chrome browser’s guest mode allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s guest mode is related to buffer overflows and the installation of malicious extensions. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service interruptions through a specially...

The vulnerability of the account_operator.cgi file in the microprogramming software for ZyXEL USG FLEX and VPN devices allows a hacker to alter the device’s configuration data and trigger a service failure.

The vulnerability of the accountoperator.cgi file in the ZyXEL USG FLEX and VPN networking devices relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor to remotely alter the device’s...

The vulnerability of Google Chrome’s libphonenumber library allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s libphonenumber library is related to buffer overflows and the installation of malicious extensions. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and even cause service interruptions through a specially...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS operating system in devices of the EX4300-MP, EX4600, and QFX5000 series allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS on EX4300-MP, EX4600, and QFX5000 devices is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the DNS BIND server arises from buffer overflows in the stack when BIND operates as a resolver. This allows attackers to cause a service failure.

The vulnerability of the BIND DNS server is related to the overflow of the buffer in the stack when BIND operates as a resolver. This occurs when the number of recursive requests reaches an acceptable maximum, and the server’s settings allow it to return previously cached responses. Exploiting th...

The vulnerability of the SSL-VPN portal for operating systems FortiOS and the proxy server used for protecting against internet attacks by FortiProxy allows attackers to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems and the FortiProxy proxy server used for protecting against internet attacks is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the SSL-VPN daemon on the FortiOS operating system, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the SSL-VPN daemon on the FortiOS operating system is related to the assignment of a null pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted HTTP requests to the /proxy endpoint...

The vulnerability of the SSL-VPN daemon on the FortiOS operating system, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the SSL-VPN daemon on the FortiOS operating system is related to the assignment of a null pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted HTTP requests to the /proxy endpoint...

Introducing Integrated API Abuse Prevention to Combat Bad Bots

In recent years theres been a rise in "API Abuse" attacks, which includes detrimental automated behaviors such as malicious bots, account takeover ATO, credential stuffing, application layer L7 DDoS, data scraping, and more. For instance, in April-2021 malicious actors scraped the personal data o...

MonetDB 安全漏洞

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A security vulnerability exists in MonetDB Server versions 11.45.17 and 11.46.0, which stems from a security issue with the component relsequences. An attacker could exploit this vulnerabilit...