The vulnerability of the SuiteCRM system for managing customer relationships, related to deficiencies in access control, allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the SuiteCRM customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures using the username of the...

PT-2022-14981 · Oracle · Oracle Communications Billing/Revenue Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Billing and Revenue Management versions 12.0.0.4.0 through 12.0.0.7.0 Description: The issue allows an unauthenticated attacker with network access via TCP to compromise Oracle Communications Billing and Revenue...

The vulnerability of the Azure RTOS operating system’s USBX implementation allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Azure RTOS operating system’s USBX implementation lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...

The vulnerability of InspIRCd, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of InspIRCd relates to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ex_finally() function in the Vim text editor allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the exfinally function in the Vim text editor is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code using a specially created file...

CVE-2022-37894

An unauthenticated Denial of Service DoS vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected AP of Aruba InstantOS 6.4.x:...

The vulnerability of the Mozilla Firefox browser lies in the insufficient resource control during the processing of XML documents. This allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Mozilla Firefox browser is related to insufficient resource control during the processing of XML documents. Exploiting this vulnerability allows a malicious actor to cause service failures, bypass security restrictions, access confidential information, or execute arbitrar...

PT-2022-5009 · Vmware · Vmware Esxi

Name of the Vulnerable Software and Affected Versions: VMware ESXi affected versions not specified Description: The issue is related to a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process may create a denial of service condition on the host. This can b...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure by using a specially created website...

The vulnerability of the libresolv library in operating systems such as macOS, iOS, tvOS, watchOS, and iPadOS allows a hacker to cause a service failure.

The vulnerability of the libresolv library in operating systems such as macOS, iOS, tvOS, watchOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Central Management Console (CMC) component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to disclose protected information or cause service interruptions.

The vulnerability of the Central Management Console CMC component of the SAP BusinessObjects Business Intelligence platform is related to the possibility of manipulating inter-site queries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause...

The vulnerability of the task scheduler daemon in UNIX-like operating systems, Cron, related to the allocation of unlimited memory, allows a intruder to trigger a service failure.

The vulnerability of the Cron task scheduler in UNIX-like operating systems is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a service failure...

The vulnerability of the LibRaw::copy_bayer function in the libraw_cxx.cpp component of the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the LibRaw::copybayer function in the librawcxx.cpp component of the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability in the transport.py component of the SSHv2 protocol library for Python Paramiko allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the transport.py component in the SSHv2 protocol library for Python Paramiko is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

The vulnerability of the Bluetooth HOST microprogramming system component in Qualcomm’s embedded chips allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Bluetooth HOST microprogramming system component in Qualcomm embedded chips relates to the lack of checks on buffer length and reading beyond the memory boundary when processing the l2cap parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized...

PT-2022-24687 · Unknown · Smart Evision

Name of the Vulnerable Software and Affected Versions: Smart eVision affected versions not specified Description: The issue is related to improper privilege management. A remote attacker with general user privilege can exploit this to escalate to administrator privilege, allowing them to perform...

Carlo Gavazzi UWP SQL注入漏洞

Carlo Gavazzi UWP is a monitoring and control Universal Web Platform from Carlo Gavazzi. for applications such as building automation, energy efficiency performance management and parking lot guidance. Carlo Gavazzi UWP 3.0 suffers from a SQL injection vulnerability that can be exploited by a...

The vulnerability of the apr_time_exp*() and apr_os_exp_time*() functions in the APR library allows a hacker to gain access to confidential data, as well as to cause service interruptions.

The vulnerability of the aprtimeexp and aprosexptime functions in the APR library lies in the reading of data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

The vulnerability of the `cv::BmpDecoder::readData` function in the `modules/imgcodecs/src/grfmt_bmp.cpp` file of the Computer Vision Library (OpenCV), a freely available computer vision and image processing library for general-purpose numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the cv::BmpDecoder::readData function in the modules/imgcodecs/src/grfmtbmp.cpp file of the Computer Vision Library OpenSource Computer Vision Library – OpenCV involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain...