5254 matches found
The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices allows a attacker to cause a service failure.
The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation for the Cisco IOS XE operating system on Cisco Catalyst 9800 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to...
The vulnerability of the Internet Explorer and Sailfish Browser script handlers, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Internet Explorer script handler arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of Intel Wireless for Open Source microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to cause a service failure.
The vulnerability of Intel Wireless for Open Source microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2020-14378
An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the movedesc function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could cause movedesc to get stuck in a 4,294,967,295-count iteration loop. Depending on how vhostcrypto is...
Denial of Service Vulnerability in Foxit PDF Reader
Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...
The vulnerability of the nghttp2 library, related to errors occurring when using allocated memory during the processing of HTTP/2 SETTINGS, allows a attacker to cause a service failure.
The vulnerability of the nghttp2 library is related to errors that occur when using allocated memory during the processing of HTTP/2 SETTINGS packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending numerous HTTP/2 SETTINGS packets...
The vulnerability of the Intel Active Management Technology implementation arises from insufficient validation of input data. This allows attackers to disclose protected information or cause service failures.
The vulnerability of the Intel Active Management Technology implementation exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information or cause service failures...
The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the insufficient calculation of the password hash. This allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.
The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient calculation of the password hash. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose protected information, or cause service failures...
The vulnerability of the get_cert_name function (gnutls.c) in the application for connecting to virtual private networks via OpenConnect allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the getcertname function gnutls.c in applications for connecting to virtual private networks via OpenConnect is related to buffer overflow vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...
CVE-2020-5930
In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers can cause disruption of service via undisclosed methods...
Design/Logic Flaw
In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers can cause disruption of service via undisclosed methods...
CVE-2020-5930
In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers can cause disruption of service via undisclosed methods...
The vulnerability of the software for managing Intel Optane(TM) DC Persistent Memory Module Management lies in the absence of quotation marks around elements or search paths. This allows an attacker to exploit their privileges or cause service failures.
The vulnerability of the software for managing Intel OptaneTM DC Persistent Memory Module Management is related to the absence of quotation marks in the code or search paths. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service failures...
The vulnerability of microprogrammed BIOS software in Intel processors allows attackers to enhance their privileges, cause system failures, or compromise the confidentiality of protected information.
The vulnerability of Intel processor BIOS microprogramming software is related to a logical error. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause service failures, or compromise the confidentiality of protected information...
The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Cortado ThinPrint parser EMR STRETCHDIBITS component of the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a...
Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the MySQL Server component, the database management system, exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL Protocol network protocol...
ALPINE-CVE-2020-14392
An untrusted pointer dereference flaw was found in Perl-DBI 1.643. A local attacker who is able to manipulate calls to dbddblogin6sv could cause memory corruption, affecting the service's availability...
mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...
wildfly: Some EJB transaction objects may get accumulated causing Denial of Service
A flaw was found in Wildfly's EJB Client, where the accumulation of specific EJB transaction objects over time can cause services to slow down and eventually become unavailable. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is to system...