5261 matches found
The vulnerability of the microprogramming software for the SIMATIC CP 442-1 RNA and SIMATIC CP 443-1 RNA communication modules, related to uncontrolled resource consumption, allows attackers to execute an “ARP storm” attack and cause service failure.
The vulnerability of the microprogramming software for the SIMATIC CP 442-1 RNA and SIMATIC CP 443-1 RNA communication modules is related to an uncontrolled consumption of resources during the processing of ARP requests. Exploiting this vulnerability can allow attackers to execute an “ARP storm”...
The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver allows a attacker to disclose protected information, compromise data integrity, and cause service failures.
The vulnerability of the kernel-level driver nvlddmkm.sys of the NVIDIA GPU Display Driver is related to access control deficiencies. Exploiting this vulnerability can allow attackers to disclose sensitive information, compromise data integrity, and cause service failures by gaining administrativ...
The vulnerability of the ext4_read_file function in the Cboot module of the NVIDIA Jetson computing platform’s driver suite allows a malicious actor to execute arbitrary code, gain elevated privileges, or cause partial service failure.
The vulnerability of the ext4readfile function in the Cboot module of the NVIDIA Jetson computing platform’s driver suite is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain elevated privileges, or cause partial...
The vulnerability of the Intel SGX driver for Linux operating system kernels allows unauthorized users to cause service failures due to uncontrolled resource consumption.
The vulnerability of the Intel SGX driver for Linux operating system kernels is related to an uncontrolled consumption of resources when switching from the EPC segment Enclave Page Cache to regular RAM. Exploiting this vulnerability can allow a hacker to cause a service failure...
The vulnerability in the implementation of the copy_info_records_to_user() function in Linux operating systems allows a malicious actor to escalate their privileges or cause service failures.
The vulnerability of the copyinforecordstouser function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service interruptions...
Omron SYSMAC CS/CJ/CP Series 和 NJ/NX Series 数据伪造问题漏洞
Omron SYSMAC CS/CJ/CP Series and Omron SYSMAC NJ/NX Series are products of Omron Corporation, Japan.Omron SYSMAC CS/CJ/CP Series is a series of programmable controllers.Omron SYSMAC NJ/NX Series is a series of machine automation controllers. Omron SYSMAC NJ/NX Series is a series of machine...
Motorola Solutions ACE1000 授权问题漏洞
The Motorola Solutions ACE1000 is a Remote Terminal Unit RTU from Motorola USA. The Motorola Solutions ACE1000 RTU version suffers from an authorization issue vulnerability that stems from the fact that the affected product's SSH service is controlled by five pre-configured accounts, all of which...
The vulnerability of Emerson DeltaV industrial workstations lies in their inadequate authentication procedures. This allows attackers to access confidential data, compromise its integrity, and even cause service interruptions.
The vulnerability of Emerson DeltaV industrial workstations is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker operating remotely to access confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the embedded images of the ControlWave telemechanics controller allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of embedded images of telemechanics controllers from ControlWave is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and even cause...
The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and cause service...
The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Universal Banking system allows a perpetrator to gain access to data reading or cause a partial service disruption.
The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Universal Banking system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to data or cause partial service interruption...
The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.
The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using network T3/IIOP protocols...
The vulnerability of the Infrastructure component of the Oracle Banking Treasury Management software allows a perpetrator to gain access to protected information, modify file access rights, or cause partial service interruption.
The vulnerability of the Infrastructure component of the Oracle Banking Treasury Management software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information, modify file access rights, or...
The vulnerability in the API interfaces of Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information or cause service failures.
The vulnerability of Google Chrome and Microsoft Edge browser extension APIs is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures through a specially create...
The vulnerability of the Cboot module (tegrabl_cbo.c) in the NVIDIA Jetson microprogramming system driver package allows a hacker to execute arbitrary code or cause a partial service failure.
The vulnerability of the Cboot module tegrablcbo.c in the NVIDIA Jetson microprogramming system driver package is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a partial service failure...
The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to create, delete, or alter access to critical data, gain read-only access to data, or cause partial service disruption.
The vulnerability of Oracle Banking Trade Finance’s Infrastructure component is related to errors in the code. Exploiting this vulnerability allows a malicious actor to create, delete, or alter access to critical data, gain read-only access to data, or cause partial service interruptions through...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using network packets...
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted packet...
PT-2022-3176 · Emerson · Emerson Deltav Distributed Control System
Name of the Vulnerable Software and Affected Versions: Emerson DeltaV Distributed Control System DCS versions prior to 14.3 Description: The issue is related to insufficient verification of firmware integrity, specifically an inadequate checksum approach and lack of signature. This could...
The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...