The vulnerability of the X-server fly-dm, related to the bypassing of authentication due to a fundamental error, allows attackers to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the X-server fly-dm involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability allows an attacker who operates remotely to gain access to protected information, compromise its integrity, and cause service failures...

The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as the Microsoft Office suite, stems from insufficient validation of input data. This allows attackers to gain access to protected information, execute arbitrary code, or cause service interruptions.

The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as the Microsoft Office suite, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to access protected information, execute arbitrary code, or cause...

CVE-2020-9201

There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal...

The vulnerability of the `get_next_file` function in the UNIX utility `tcpdump` involves a lack of mechanism for checking the size of input data. This leads to the output data exceeding the buffer’s capacity, allowing attackers to access protected information, cause service failures, or compromise the availability of information.

The vulnerability of the getnextfile function in the UNIX utility tcpdump is related to a lack of mechanism for checking the size of input data, resulting in the output operation being within the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to protecte...

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of the _open_index function in the FpxImagePlugin.py library, a library for working with images from Pillow, related to integer overflow, allows a hacker to cause a service failure.

The vulnerability of the openindex function in the FpxImagePlugin.py library, a library for working with images, relates to a lack of mechanisms for controlling resource consumption. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

The vulnerability of the Data-Loss-Prevention module in the Clam Antivirus antivirus software allows a hacker to trigger a service failure.

The vulnerability of the Data-Loss-Prevention module in the Clam Antivirus antivirus software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending a specially crafted email message...

The vulnerability of the mbfl_filt_conv_big5_wchar function in the PHP interpreter allows a hacker to access protected information or cause service failures.

The vulnerability of the mbflfiltconvbig5wchar function in the PHP interpreter arises due to an operation being performed outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability of the KMS implementation in the Junos operating system allows a attacker to cause failures in the configuration of IPSec channels and service disconnection.

The vulnerability of the Junos operating system’s Key Management Service implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause failures in IPSec channel configurations and service availability...

The vulnerability of the implementation of the Cisco Video Surveillance 8000 Series IP camera protocol allows a intruder to trigger a service failure.

The vulnerability of the Cisco Video Surveillance 8000 Series detection protocol lies in errors during the processing of detection protocol packets. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the authentication function of the Cisco IOS XE operating system’s web server allows a hacker to cause a malfunction in the web server’s operation.

The vulnerability of the Cisco IOS XE operating system’s server authentication function is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to cause malfunctions in the server...

The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows an attacker to disclose protected information or cause service failures.

The vulnerability of the Adobe Media Encoder application relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability of the sysctl hugetlbl utility in the Linux operating system allows a hacker to cause a service failure or increase privileges.

The vulnerability of the sysctl hugetlbl utility in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures or elevate privileges...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information or cause service failures.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

DEBIAN-CVE-2020-27778

A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' program, would crash the application causing a denial of service...

The vulnerability of the KD_FONT_OP_COPY function in the fbcon driver of Linux operating systems allows attackers to escalate their privileges or cause service failures.

The vulnerability of the KDFONTOPCOPY function in the fbcon driver of Linux operating system kernels relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

DEBIAN-CVE-2020-14383

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again...

AZL-36990 CVE-2020-14383 affecting package samba for versions less than 4.18.3-1

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again...

The vulnerability of Intel Ethernet Series 700 controllers, which stems from the improper use of security mechanisms, allows attackers to trigger a service failure or increase their privileges.

The vulnerability of Intel Ethernet Series 700 controllers is related to the improper use of security mechanisms. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...