5188 matches found
Facebook Wangle has an unspecified vulnerability
Facebook Wangle is a library for building protocols, application clients, and application servers from the American company Facebook. An unspecified vulnerability exists in Facebook Wangle. An attacker could exploit this vulnerability to cause a system used to accept TLS 1.3 protocol connections ...
The vulnerability of the Libvirt virtualization management library, related to a bug that leads to excessive memory consumption, allows a hacker to trigger a service failure.
The vulnerability of the Libvirt virtualization management library is related to an error that causes excessive memory consumption when processing large data streams by QEMU. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Secure/Multipurpose Internet Mail Extensions (S/MIME) function in the Cisco AsyncOS operating system allows a perpetrator to trigger a service failure.
The vulnerability of the Secure/Multipurpose Internet Mail Extensions S/MIME function in the Cisco AsyncOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending a specially crafted...
The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the lz4::decompress function in the Graphite library of Mozilla Firefox and Mozilla Firefox ESR browsers is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerability in the graphite2::Silf::readGraphite function of the Graphite library for Mozilla Firefox and Mozilla Firefox ESR browsers allows an attacker to cause a service failure or execute arbitrary code.
The vulnerability of graphite2::Silf::readGraphite in the Graphite 2 library for Mozilla Firefox and Mozilla Firefox ESR browsers relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary cod...
The vulnerability of the xmlParsePEReference component in the libxml2 library, which is used for working with XML and HTML files, allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the xmlParsePEReference component in the libxml2 XML parsing library is related to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures through a specially...
The vulnerability of the JunOS operating system allows a hacker to execute arbitrary code and cause service interruptions.
The vulnerability of the JunOS operating system arises from an uninitialized function pointer in the Packet Forwarding Engine manager fxpc. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and trigger a service failure using a specially crafted HTTP packet...
The vulnerability of the Java Server Faces component of the Oracle GlassFish Server software platform allows attackers to modify sensitive information or cause service failures.
The vulnerability of the Java Server Faces component of the Oracle GlassFish Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify protected information or cause service failures...
The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to a failure in the routing daemon process rpd...
The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by triggering a process failure of FPC...
CVE-2019-2480
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2019-2474
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
The vulnerability of the CAPWAP Discovery Request analysis procedure implemented in the Cisco Wireless LAN Controller allows a attacker to cause a service failure.
The vulnerability of the CAPWAP request analysis process, where the Cisco Wireless LAN Controller is involved, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by reloading the targeted device with...
The vulnerability of the Fly-wm file manager in the Astra Linux operating system allows a hacker to gain unauthorized access to the user’s session, as well as to cause a service failure.
The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...
The vulnerability of the RubyGems package management system, related to the creation of infinite loops, allows for the execution of arbitrary code.
The vulnerability of the RubyGems package management system is related to improper handling of the tar archive header, which can lead to the creation of an infinite loop. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.
The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...
The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol allows a attacker to cause a service failure in Cisco IOS and Cisco IOS XE operating systems.
The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures using...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome browsers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a denial-of-service attack through a specially crafted web page...
The vulnerability of the Qualcomm TrustZone component of the Android operating system allows a hacker to trigger a service failure.
The vulnerability of the Qualcomm TrustZone component of the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a perpetrator to cause service interruptions...
CVE-2018-7793
A Credential Management vulnerability exists in FoxView HMI SCADA All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 CCS 9.4 and FoxView 10.5. which could cause unauthorized disclosure, modification, or disruption in service when the password is...