5250 matches found
The vulnerability of the ldp_tlv_print() function in the tcpdump utility for intercepting and analyzing network traffic allows a hacker to induce a service failure.
The vulnerability of the ldptlvprint function in the tcpdump network traffic capture and analysis utility is related to buffer-over-read operations in memory. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...
SAP Banking Services Improper Authentication Vulnerability
SAP Banking Services is a banking services solution from SAP. An improper authentication vulnerability exists in SAP Banking Services 500. The vulnerability stems from the program not properly authorizing objects. An attacker could exploit the vulnerability to elevate privileges and service...
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).
...
Huawei Mate 30 (5G) Taurus-AN00B Buffer Overflow Vulnerability
Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A buffer overflow vulnerability exists in versions prior to Huawei Taurus-AN00B 10.1.0.156 C00E155R7P2. The vulnerability stems from a function in the module that does not adequately validate input. An attacker could use...
CVE-2020-16927
CVE-2020-16927 describes a denial-of-service vulnerability in Remote Desktop Protocol (RDP). An attacker can trigger a denial of service by initiating an RDP connection to a server that exposes RDP and sending specially crafted requests, potentially causing the RDP service to stop responding. The...
The vulnerability of the CMC module of the SAP BusinessObjects Business Intelligence platform allows a hacker to disclose protected information or cause service interruptions.
The vulnerability of the CMC module of the SAP BusinessObjects Business Intelligence platform is related to errors in processing XML requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...
The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) system allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.
The vulnerability of the Web interface for managing the Cisco Data Center Network Manager DCNM system is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise data integrity, gain unauthorized access to protected...
The vulnerability of the iconv utility in the GNU C Library (glibc) system library arises from insufficient input validation, allowing attackers to trigger a service failure.
The vulnerability of the iconv utility in the GNU C Library glibc is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures when invoking the iconv utility with the ā-cā option...
CVE-2020-9122
Some Huawei products have an insufficient input verification vulnerability. Attackers can exploit this vulnerability in the LAN to cause service abnormal on affected devices.Affected product versions include:HiRouter-CD30-10 version 10.0.2.5;HiRouter-CT31-10 version 10.0.2.20;WS5200-12 version...
CVE-2020-9090
FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product...
CVE-2020-9105
Taurus-AN00B versions earlier than 10.1.0.156C00E155R7P2 have an insufficient input validation vulnerability. Due to the input validation logic is incorrect, an attacker can exploit this vulnerability to access and modify the memory of the device by doing a series of operations. Successful exploi...
The vulnerability of the Cisco IOS XE operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco IOS XE operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the DNS split-function in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.
The vulnerability of DNS split-function in Cisco IOS and Cisco IOS XE operating systems is related to insufficient processing of regular expressions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the mDNS protocol in the Cisco IOS XE operating system for Cisco Catalyst 9000 Series network devices allows a attacker to induce a service failure.
The vulnerability of the mDNS protocol in Cisco IOS XE operating systems and Cisco Catalyst 9000 Series networking devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE operating systems of Cisco Catalyst 9000 Series network devices allows a attacker to trigger a service failure.
The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the wireless data transmission technology for the Cisco IOS operating system on Cisco 800 Series Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers allows a intruder to gain unauthorized access to protected information or cause service failures.
The vulnerability of the wireless data transmission technology for the Cisco IOS operating system on Cisco 800 Series Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers is related to privilege management errors. Exploiting this vulnerability could allow an attacke...
The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.
The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...
The vulnerability of the Internet Explorer and Sailfish Browser script handlers, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Internet Explorer script handler arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of Intel Wireless for Open Source microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to cause a service failure.
The vulnerability of Intel Wireless for Open Source microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2020-14378
An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...