5195 matches found
The vulnerability of the Libarchive library for working with archives, related to memory management after deallocation, allows an attacker to trigger a service failure.
The vulnerability of the library for working with Libarchive archives libarchive/archivereadsupportformatrar.c is related to a bug in the RAR format decoder. Exploiting this vulnerability may allow an attacker to cause service interruptions...
The vulnerability of the Tianocore edk2 library, caused by insufficient validation of user input data, allows attackers to escalate their privileges or cause service failures.
The vulnerability of the Tianocore edk2 library arises from insufficient validation of the data entered by users. Exploiting this vulnerability can allow a malicious actor to increase their privileges or cause service failures...
The vulnerability of the Django library for the Python programming language, which allows attackers to compromise the integrity of protected information
The vulnerability of the Django library for the Python programming language is related to insufficient elimination of special elements in the output data used by the lower-level component. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Wireshark traffic analyzer program, related to reading data beyond the memory boundaries, allows a hacker to cause a service failure.
The vulnerability of the Wireshark traffic analyzer program relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted package...
The vulnerability of the `load_specificdebug_section` function in the GNU Binutils, related to integer overflow, allows a attacker to cause a service failure.
The vulnerability of the loadspecificdebugsection function in objdump.c within the GNU Binutils package is related to integer overflow, which can lead to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...
ENTTEC Datagate MK2, Storm 24 and Pixelator Denial of Service Vulnerabilities
ENTTEC Datagate MK2 and others are products of ENTTEC Australia.ENTTEC Datagate MK2 is a lighting controller.ENTTEC Storm 24 is an Ethernet to DMX512 converter.ENTTEC Pixelator is a pixel controller. A denial of service vulnerability exists in ENTTEC Datagate MK2, Storm 24, and Pixelator, which c...
ArcSight Logger XML External Entity Parsing Vulnerability
Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. An XML external entity injection vulnerability exists in Micr...
The vulnerability of the 802.1X network operating system implemented in Cisco NX-OS devices allows a intruder to cause a service failure.
The vulnerability of the 802.1X network operating system implemented in Cisco NX-OS devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability in the web interface of software for network monitoring in Cisco Network Assurance Engine allows a perpetrator to disclose protected information or cause service failures.
The vulnerability of the software web interface for network monitoring in the Cisco Network Assurance Engine lies in the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...
The vulnerability of the libparsec-mac-qt5 library, used for developing graphical applications with Qt 5 graphical interfaces on the Astra Linux operating system, allows a hacker to cause a service failure.
The vulnerability of the libparsec-mac-qt5 library for developing graphical applications using Qt 5 graphical interfaces on the Astra Linux operating system is related to a flaw that causes excessive load when there are a large number of domain users. Exploiting this vulnerability may allow a...
The vulnerability of the union data structure interpretation in Xen hypervisors, related to background data corruption, allows attackers to cause service failures or increase their privileges within the system.
The vulnerability of the union data structure interpretation in Xen hypervisors is related to errors during data underpressure situations. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges within the system...
The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.
The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Vulnerability in Firefox web browsers, Firefox ESR, and the Thunderbird email program, related to accessing freed memory cells, allowing attackers to trigger a service failure.
The vulnerability in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird relates to the release of a static flow analyzer object during use. Exploiting this vulnerability can allow an attacker to cause service interruptions using specially crafted HTML5 content with...
The vulnerability of the QXMLStreamReader function in the QXmlStream component of the cross-platform software development framework for Qt allows a perpetrator to cause a system failure or gain unauthorized access to information.
The vulnerability of the QXMLStreamReader function in the QXmlStream component of the cross-platform software development framework for Qt is related to double memory deallocation. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to...
The vulnerability of the `archive_le32dec` function in the libarchive library, which allows a hacker to trigger a service failure.
The vulnerability of the archivele32dec function in the archiveendian.h header file of the libarchive library is related to overflow in the dynamic buffer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created file...
The vulnerability of the kernel of Linux and FreeBSD systems lies in errors in the algorithms used for reassembling packages in TCP stacks, which allows a hacker to cause a service failure.
The vulnerability of the kernel of Linux and FreeBSD systems is related to errors in the algorithms used for repackaging packages in TCP stacks. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially crafted traffic...
The vulnerability of the WkbProgramLow function in the WibuKey Network Server Management security tool allows a hacker to trigger a service failure.
The vulnerability of the WibuKey Network Server Management security software in the WkbProgramLow function is related to buffer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions and potentially execute arbitrary code, using specially crafted...
CVE-2019-1684
A vulnerability in the Cisco Discovery Protocol or Link Layer Discovery Protocol LLDP implementation for the Cisco IP Phone 7800 and 8800 Series could allow an unauthenticated, adjacent attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of service DoS...
The vulnerability of the Solaris operating system’s kernel, which allows a hacker to modify data or cause service interruptions.
The vulnerability of the Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause service failures...
The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ event service allows a perpetrator to gain read access to data, modify data, or cause a partial service failure.
The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, or cause a partial service outage through HTTP...