5261 matches found
CVE-2022-26668 ASUS Control Center - Broken Access Control
ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service...
National Health Insurance 缓冲区错误漏洞
National Health Insurance NHI is a health insurance program health insurance card in Taiwan, China. National Health Insurance has a security vulnerability that originates from insufficient validation of input string length. A remote attacker could exploit the vulnerability to flood memory space...
The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability of the Windows Hyper-V hardware virtualization system is related to errors in information processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
The vulnerability of the WebGL component in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of the WebGL component in Google Chrome and Microsoft Edge relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...
The vulnerability in the API for working with computer graphics in WebGPU browsers like Google Chrome and Microsoft Edge allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of the API for working with computer graphics in WebGPU browsers like Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service interruptions remotely...
CVE-2022-27512
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...
Improper Access Control in Crabtyper API
Description The API program allows any user to create languages and snippets, as well as delete them. This allows a malicious actor to add offensive snippets which could appear to any user, and also allows anyone to completely take down the service by removing all snippets. This is due to...
The vulnerability of the Oracle Solaris operating system’s kernel allows a perpetrator to gain access to modify, add, or delete data, or cause partial service failure.
The vulnerability of the Oracle Solaris operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause partial service interruptions...
CVE-2022-27512
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...
Citrix Application Delivery Management Security Bulletin for CVE-2022-27511 and CVE-2022-27512
Vulnerabilities have been discovered in Citrix Application Delivery Management Citrix ADM that, if exploited, could result in the following security issues: Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the ne...
The vulnerability affects the implementation of the Control Point Access Point Wireless Provisioning Protocol (CAPWAP) on Cisco IOS XE operating systems, as well as Control Points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers. This allows a malicious actor to cause service interruptions.
The vulnerability of the CAPWAP protocol implementation in Cisco IOS XE operating systems, as well as in Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers, is related to an unvalidated return value that causes the zero pointer to be swapped...
The vulnerability of the NAS message processing component of the microprogramming software for 2/3/4/5G Unisoc devices allows a hacker to cause a service failure.
The vulnerability of the NAS-message processing component of microprogramming software for 2/3/4/5G Unisoc devices relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted...
The vulnerability of the vhost_vdpa_config_validate() function in Linux kernel allows a attacker to escalate their privileges or cause service failures.
The vulnerability of the vhostvdpaconfigvalidate function in Linux operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service failures...
Vulnerability of the OGRExpatRealloc function in the ogr/ogr_expat.cpp file. The GDAL geospatial transformation library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
Vulnerability of the OGRExpatRealloc function in the ogr/ogrexpat.cpp file. The GDAL geoprocessing library involves repeated memory reclamation. Exploiting this vulnerability may allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the TCP-proxy function in Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to trigger a service failure.
The vulnerability of the TCP-proxy function in Cisco Firepower Threat Defense FTD software relates to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted TCP traffic stream...
The vulnerability in the implementation of the PushLongPixel() function of the ImageMagick graphic editor allows a hacker to trigger a service failure or gain unauthorized access to protected information.
The vulnerability of the PushLongPixel function in the ImageMagick graphic editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure or gain unauthorized access to protected information through a...
The vulnerability in the implementation of the vim regsub_both() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the vim regsubboth function in the Vim text editor is related to writing data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created file...
The vulnerability of the CAMS for HIS distributed control systems management component is related to violations of security design principles. This allows attackers to access protected information or cause service failures.
The vulnerability of the CAMS for HIS distributed control systems’ emergency message and event management components is related to violations of secure design principles. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information or cause...
The vulnerability of the TCP Pace Handler component, located in the tcp_internal_pacing function of the net/ipv4/tcp_output.c file in the Linux operating system’s kernel, allows a hacker to trigger a service failure.
The vulnerability of the TCP Pace Handler component, located in the tcpinternalpacing function of the net/ipv4/tcpoutput.c file in the Linux kernel, is related to memory-related errors after deallocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Denial of Service (DoS)
Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...