CVE-2022-1300 Missing authentication in TRUMPF products may result in corruption of data

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service...

TRUMPF TruTops访问控制错误漏洞

TRUMPF TruTops is TRUMPF's unique software for 2D/3D design and programming of laser, stamping and bending machines. An Access Control Error vulnerability exists in several TRUMPF TruTops products and stems from the application not performing required authentication for certain service functions...

The vulnerability of the zend_ts_hash_gracefuldestroy function (zend_ts_hash.c) in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the zendtshashgracefuldestroy function zendtshash.c in the PHP programming language is related to the repeated release of memory. Exploiting this vulnerability may allow a remote attacker to cause service interruptions or potentially have other adverse effects...

The vulnerability of the EXIF extension in the PHP programming language interpreter allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the PHP interpreter extension arises due to buffer overflows. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a JPEG image containing TIFF data...

The vulnerability of the _zend_shared_memdup function in the PHP programming language allows a attacker to cause a service failure or exert other effects.

The vulnerability of the zendsharedmemdup function zendsharedalloc.c in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or have other adverse effects...

The vulnerability of the dtls1_clear_queues function in the OpenSSL library allows a attacker to cause a service failure or potentially cause other effects.

The vulnerability of the dtls1clearqueues function in the OpenSSL library arises due to buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or potentially other adverse effects...

The vulnerability of the timezone function in the PHP programming language interpreter allows attackers to trigger a service failure.

The vulnerability of the PHP language interpreter’s timezone function is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the copy_page_to_iter() function in the Linux operating system allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the copypagetoiter function in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

The vulnerability of the ext/shmop/shmop.c component of the PHP programming language interpreter allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the ext/shmop/shmop.c component of the PHP programming language interpreter is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures or disclose sensitive information...

The vulnerability of the `php_html_entities` function in the PHP programming language allows attackers to trigger a service failure or potentially cause other adverse effects.

The vulnerability of the phphtmlentities function in the PHP programming language is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service failures or potentially other adverse effects...

The vulnerability of the phar_parse_metadata function (ext/phar/phar.c) in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the pharparsemetadata function ext/phar/phar.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions or potentially other adverse effects...

The vulnerability in the `build_tablename` function (`pgsql.c`) of the PHP programming language interpreter allows a hacker to trigger a service failure.

The vulnerability of the buildtablename function in the PHP programming language interpreter is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the SplFileObject::fread function in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the SplFileObject::fread function in the PHP programming language is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures or potentially cause other adverse effects...

The vulnerability of the bzread function (ext/bz2/bz2.c) in the PHP programming language allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the bzread function ext/bz2/bz2.c in the PHP interpreter is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially created .bz2 archive...

Improper handling of Length parameter

Description There was no restriction on the amount of text that can be inserted into a user's name field. When the text size was large enough the service resulted in a momentary outage in our non-production environment not high availability. An internal reproduction showed isolated disruption but...

CVE-2022-26674

ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitrary code execution, arbitrary system operation or disrupt service...

The vulnerability of the tls_decrypt_ticket function in the OpenSSL library exists due to insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the tlsdecryptticket function in the OpenSSL library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Oracle MySQL InnoDB Component Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Server is one of the database server components.MySQL Connectors is one of the drivers for connecting applications that use MySQL. A denial of service vulnerability exists in Oracle MySQL component:...

The vulnerability of the exif_process_user_comment function (ext/exif/exif.c) in the PHP programming language allows a hacker to cause a service failure.

The vulnerability of the exifprocessusercomment function ext/exif/exif.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the ext/snmp/snmp.c component of the PHP programming language interpreter allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the ext/snmp/snmp.c component of the PHP programming language interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially have other effects through specially created...