5254 matches found
The vulnerability of the microprogramming software of the modular controller for transformer substations automation by Schneider Electric Easergy T300 RTU, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information, cause service failures, or execute arbitrary commands.
The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 RTU-based transformer automation systems is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to...
The vulnerability of the PostgreSQL database management system lies in the lack of measures taken to protect SQL query structures. This allows attackers to gain unauthorized access to protected information or cause service failures.
The vulnerability of the PostgreSQL database management system is related to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures by using...
The vulnerability of NTP protocol implementations allows attackers to induce service failures.
The vulnerability of NTP synchronization protocol implementations exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure ntpd daemon failure due to an invalid value in the :config directive...
The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading data beyond the permissible buffer size, allows an attacker to access confidential data and also cause a service failure.
The vulnerability of the d2alawarray function in the SI libsndfile library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service interruptions...
The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to access control deficiencies, allows attackers to escalate their privileges or cause service failures.
The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service interruptions...
PT-2021-5804 · Ntfs-3G +7 · Ntfs-3G +7
Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs get attribute value. This issue may allow an attacker to access confidential data,...
Google TensorFlow数字错误漏洞
Google TensorFlow is an end-to-end open source machine learning platform. a denial-of-service vulnerability exists in Google TensorFlow. An attacker can exploit this vulnerability to cause a denial of service...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure by...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to uncontrolled resource consumption, allowing attackers to cause service interruptions.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to uncontrolled resource consumption. Exploiting these vulnerabilities can...
The vulnerability of the Autofil autocompletion function in the Google Chrome web browser allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Autofil autocompletion function in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or execute arbitrary code through a specially created malicious w...
The vulnerability of Juniper Networks Junos OS routers of the MX, EX9200, and SRX4600 series lies in deficiencies in handling exceptional states, which allows an attacker to trigger a service failure.
The vulnerability of Juniper Networks Junos OS routers of the MX, EX9200, and SRX4600 series is related to deficiencies in handling exceptional states during packet processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
PT-2021-6425 · Oracle +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue allows a high-privileged attacker with access to the physic...
Akamai Summarizes Service Disruption (RESOLVED)
At 15:45 UTC on July 22, 2021, a software configuration update triggered a bug in our Secure Edge Content Delivery Network impacting that network's domain name service DNS system the system that directs browsers to websites for that specific service. This caused a disruption impacting availabilit...
Akamai Summarizes Service Disruption (RESOLVED)
At 15:45 UTC on July 22, 2021, a software configuration update triggered a bug in our Secure Edge Content Delivery Network impacting that network's domain name service DNS system the system that directs browsers to websites for that specific service. This caused a disruption impacting availabilit...
The vulnerability of the i2ulaw_array function in the libsndfile library, which relates to reading data beyond the allowable buffer limits, allows a attacker to cause a service failure.
The vulnerability of the i2ulawarray function in the libsndfile library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the wsrep_notify_cmd modification in the MariaDB database, which stems from the lack of measures to sanitize input data, allows attackers to access confidential information or cause service failures.
The vulnerability of the wsrepnotifyCmd modification in the MariaDB database is related to the lack of measures for cleaning input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...
The vulnerability of the X.org server, related to a countable loss of significance, allows a perpetrator to access confidential information or cause service failures.
The vulnerability of the X.org server is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
The vulnerability of the exif_data_save_data_entry function in the library for grammatical analysis of EXIF files in libexif, related to reading beyond the permissible buffer limits, allows a perpetrator to access confidential information or cause service failures.
The vulnerability of the exifdatasavedataentry function in the EXIF-file grammar analysis library libexif is related to reading data beyond the permissible buffer limits. Exploiting this vulnerability could allow an attacker to access confidential information or cause service failures...
The vulnerability of the double64_init() function in the libsndfile library, which stems from the lack of checks for division by zero, allows attackers to cause a service failure.
The vulnerability of the double64init function in the libsndfile library is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...