5255 matches found
The vulnerability of the ngx_memcpy function in the OpenResty web server, related to buffer overflows, allows attackers to cause a service failure.
The vulnerability of the memcpy-param-overlap function in the OpenResty web server is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...
The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3s_hv_rmhandlers.S of Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3shvrmhandlers.S of Linux operating systems is related to the lack of checks for returned data during the processing of SRR1 values. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2021-43360
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...
PT-2021-8112 · Unknown +5 · Virglrenderer +5
Name of the Vulnerable Software and Affected Versions: virglrenderer affected versions not specified Description: The issue is related to an out-of-bounds write in the VirGL virtual OpenGL renderer. A malicious guest can create a specially crafted virgil resource and issue a VIRTGPU EXECBUFFER...
The vulnerability in the implementation of the tipc_crypto_key_rcv() function for the TIPC protocol, which is used for intra-cluster communication in Linux operating systems, allows a attacker to cause a service failure or gain increased privileges.
The vulnerability of the implementation of the tipccryptokeyrcv function in the Linux operating system’s Transparent Inter-Process Communication TIPC kernel relates to insufficient input validation when processing MSGCRYPTO messages. Exploiting this vulnerability can allow an attacker to cause...
The vulnerability of Windows operating system script handlers allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of Windows operating system script handlers is related to the operation of writing data beyond the buffer boundaries into memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...
Huawei HarmonyOS 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect privileges. An attacker can exploit this vulnerability to affect service availability...
The vulnerability of the check_password function in the web server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the checkpassword function in the web server of the programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code using a specially crafted reque...
The vulnerability of the web-server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the web-server-based programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of JScript and VBScript script handlers in Internet Explorer, related to the execution of operations beyond the buffer boundaries, allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of JScript and VBScript script handlers in Internet Explorer is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...
The vulnerability of the Web Transport component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Web Transport component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability in the implementation of the mm_malloc() function in the Mongoose OS operating system allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the mmmalloc function implementation in the Mongoose OS operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
CVE-2021-26336
Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...
The vulnerability of NVIDIA Control Panel software for graphics processors from NVIDIA brands such as GeForce, Studio, RTX/Quadro, NVS, and Tesla allows attackers to escalate their privileges or cause service failures.
The vulnerability of NVIDIA Control Panel software for graphics processors such as NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla is related to errors in handling hard links. Exploiting this vulnerability can allow attackers to gain elevated privileges or cause service interruptions...
The vulnerability of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors lies in errors in handling hard links, which allows attackers to exploit their privileges or cause service failures.
The vulnerability of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors relates to errors in handling hard links. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service interruptions...
The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the Cisco AsyncOS operating system’s proxy server, which is part of the Cisco Web Security Appliance internet gateway, relates to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...