The vulnerability of the PTPSettingEnable component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a hacker to cause a service failure.

The vulnerability of the PTPSettingEnable component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions by modifying the configuration file remote...

The vulnerability of the embedded web-server microprogramming software in Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 switches is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service failure using a specially crafted...

The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the embedded web-server microprogramming software for Moxa MGate models MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 lies in a buffer overflow issue during the processing of input data using the Content-Length header. Exploiting this vulnerability allows an attacker to...

The vulnerability in the drivers/net/wireless/ath/ath10k/usb.c kernel of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/net/wireless/ath/ath10k/usb.c file of Linux operating systems is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions by using an incomplete address in the endpoint descriptor...

The vulnerability of the getchar.c library in the Vim text editor lies in the lack of measures to neutralize special elements used in operating system commands. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the getchar.c library in the Vim text editor is related to the absence of filtering for the “!source” command. This command allows for the execution of arbitrary commands in the operating system. Exploiting this vulnerability enables a perpetrator to access confidential data,...

The vulnerability of the KVM virtualization subsystem in Linux operating systems allows a attacker to increase their privileges or cause service failures.

The vulnerability of the KVM virtualization subsystem in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

The vulnerability of the IRC client Irssi on Ubuntu operating systems relates to the use of memory after it is freed. This allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the IRC client Irssi on Ubuntu operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

The vulnerabilities in the drivers drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c of the Linux operating system’s kernel allow a malicious actor to execute arbitrary code or cause service failures.

The vulnerability in the drivers/char/ipmi/ipmisiintf.c, drivers/char/ipmi/ipmisimemio.c, and drivers/char/ipmi/ipmisiportio.c files of the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause...

The vulnerability of the mkv::demux_sys_t::FreeUnused() function in the video file processing library of the libebm media player, VideoLAN Media Player, allows a hacker to access protected information, cause service interruptions, or gain enhanced privileges.

The vulnerability of the mkv::demuxsyst::FreeUnused function in the libebm video processing library of the VideoLAN Media Player media player framework is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to protected information, cause servi...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows a hacker to cause a service failure.

The vulnerability of Microsoft Exchange Server exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted email messages...

OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

PT-2021-10491

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: The issue is related to a null pointer dereference passed as an argument to libavformat/aviobuf.c, which could cause a Denial of Service. Recommendations: For FFmpeg version 4.2, at the moment, there is no...

CVE-2019-0365

SAP Kernel RFC, KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows BC-FES-GUI before versions 7.5, 7.6, and SAP GUI for Java...

The vulnerability of the mod_ssl module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modssl module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted request for re-negotiation of the TLS connection...

The vulnerability of the Level 3 Maintenance Functions component of the Oracle Retail Convenience Store Back Office software allows a perpetrator to gain access to protected information, alter file access rights, or cause partial service interruption.

The vulnerability of the Level 3 Maintenance Functions component of Oracle Retail Convenience Store Back Office software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information, modify file access rights, or cause...

The vulnerability of the configuration utility in the Cisco IMC software for remote server management, which allows a attacker to execute arbitrary commands with root privileges or cause service interruptions.

The vulnerability of the configuration tool of the Cisco IMC software for remote server management by Cisco Integrated Management Controller arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

The vulnerability of the web server of the Cisco Integrated Management Controller, a software-based remote management system for servers, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions through a specially crafted HTTP request...

The vulnerability of the server process svnserve in the centralized version control system Subversion allows a perpetrator to cause a service failure.

The vulnerability of the server process svnserve in the Subversion version control system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the onSubmit() method of the Horde_Form_Type_image class (Horde/Form/Type.php) in the php-horde-form functionality allows a attacker to compromise data integrity, gain access to confidential data, and cause service interruptions.

The vulnerability of the onSubmit method in the HordeFormTypeimage class Horde/Form/Type.php of the php-horde-form functionality package is related to incorrect elimination of special characters in the POST parameter. This can lead to incorrect restrictions on the path to a restricted directory...

The vulnerability of the `defaults` function in the Lodash library allows a attacker to trigger a service failure, execute arbitrary JavaScript code, or increase their privileges.

The vulnerability of the defaults function in the Lodash library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures, execute arbitrary JavaScript code, or enhance their privileges...