The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, allows a intruder to trigger a service failure.

The vulnerability of the centralized system for managing emergency messages and events in CAMS for HIS distributed control systems CENTUM VP and CENTUM VP Entry Class, along with the OPC-server Exaopc, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a...

The vulnerability of the software platform based on Git for collaborative code development on GitLab allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper display of code in merge requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to access confidential data, compromise its integrity, and...

The vulnerability of the Node.js software platform’s DNS library, related to insufficient input validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node.js software platform’s DNS library is related to the improper handling of atypical symbols in domain names. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...

ASUS RT-AX56U 路径遍历漏洞

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...

ASUS RT-AX56U 缓冲区错误漏洞

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. The ASUS RT-AX56U suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code, perform arbitrary operations, or interrupt services...

The vulnerability of the JIT component in the Firefox web browser and the Thunderbird email client allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the JIT component in the Firefox web browser and the Thunderbird email client is related to errors during resource release. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the gf_odf_del_ipmp_tool function in the odf_code.c component of the multimedia platform GPAC allows a perpetrator to access confidential data and also cause service interruptions.

The vulnerability of the gfodfdelipmptool function in the odfcode.c component of the multimedia platform GPAC involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service failures...

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to the manipulation of the null pointer pointer, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TXTc decoder, a component of the MPEG-4 multimedia platform GPAC, is related to the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

The vulnerability of the pcapngoptionwalk function in the hcxpcapngtool.c component of the WiFi dump file conversion software, which converts cap/pcap/pcapng files into hashcat and John the Ripper Hcxtools formats. This vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the pcapngoptionwalk function in the hcxpcapngtool.c component of the WiFi dump file conversion software, which converts WiFi cap/pcap/pcapng files into hashcat and John the Ripper format, is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s encoding function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function is related to the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

Vulnerability of the Server component of the MySQL database management system, which allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Server: GIS component of the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MPEG-4 multimedia platform GPAC decoder’s decoding function is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the function DL_Dxf::handleLWPolylineData in the DXF file parsing library Dxflib allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the function DLDxf::handleLWPolylineData in the DXF file parsing library Dxflib is related to writing outside the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

The vulnerability of the redis-server component of the Redis database management system allows a attacker to cause a service failure.

The vulnerability of the redis-server component of the Redis database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the `pkg_createWithAssemblyCode` function in the `tools/pkgdata/pkgdata.cpp` component of the ICU Unicode library allows a attacker to cause a service failure.

The vulnerability of the pkgcreateWithAssemblyCode function in the tools/pkgdata/pkgdata.cpp component of the ICU Unicode library is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the `libpff_item_tree_create_node` function in the library allows access to PFF and OFF files. This enables a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the libpffitemtreecreatenode function in the library for accessing PFF and OFF files is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause a service failure using a...

The vulnerability of the gf_isom_vp_config_get function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure.

The vulnerability of the gfisomvpconfigget function in the MP4Box multimedia platform of GPAC is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...