The vulnerability of the Podman software for managing and starting OCI containers lies in the improper resolution of file access links, which allows a malicious actor to trigger a service failure.

The vulnerability of the Podman software for managing and starting OCI containers is related to improper permission handling before accessing the file. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Windows Local Session Manager component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions from a remote location...

The vulnerability of Eclipse Jetty servlet containers, related to resource exhaustion, allows attackers to trigger a service failure.

The vulnerability of Eclipse Jetty servlet containers is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the torch.cummin interface in the PyTorch machine learning framework allows a attacker to induce a service failure.

The vulnerability of the torch.cummin interface in the PyTorch machine learning framework is related to insufficient exception handling. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and Data Domain OS—due to incorrect path name restrictions in the restricted access directory—allows unauthorized individuals to gain unauthorized access to the compromised system and trigger service failure.

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, Data Domain OS operating system—related to the occurrence of operations outside the buffer in memory, allowing attackers to trigger a service failure.

The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...

The vulnerability of Zoom, a video conferencing software, relates to insufficient verification of data authenticity, allowing attackers to cause service failures.

The vulnerability of Zoom video conferencing software is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the upsert operation in the MongoDB database management system allows a hacker to cause a service failure.

The vulnerability of the upsert operation in the MongoDB database management system is related to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Netty network programming framework, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Netty network programming framework is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the nvJPEG library in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processors allows attackers to disclose protected information and cause service failures.

The vulnerability of the nvJPEG library in the NVIDIA CUDA Toolkit for parallel computing on NVIDIA GPUs is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information and cause service failures through the use of...

EUVD-2021-13142

Malware in sbrugna...

The vulnerability of the SimToolKit component of the oFono mobile communication interface allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SimToolKit component, which is part of the oFono mobile communication interface, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to access confidential data, compromise its integrity, and cause...

The vulnerability of the posix/JackSocket.cpp component in the JACK2 audio server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the posix/JackSocket.cpp component of the JACK2 audio server is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Node.js software platform, related to its dependence on machine-dependent data representations, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node.js software platform is related to its dependence on machine-dependent data representation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of oFono’s mobile communication interface, related to buffer overflow in the stack, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the oFono mobile communication interface is related to buffer overflow on the stack. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the verifyAttribute function in the library for working with audio in Libmysofa allows a intruder to trigger a service failure.

The vulnerability of the verifyAttribute function in the Libmysofa library for audio processing is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the GraphQL Endpoint component of the software platform based on Git, which is used for collaborative code development in GitLab EE/CE, allows a hacker to trigger a service failure.

The vulnerability of the GraphQL Endpoint component of the software platform based on Git for collaborative code development in GitLab EE/CE is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the uSSD.c component of the OFono mobile communication interface allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the uSSD.c component of the OFono mobile communication interface relates to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the H5O_sdspace_decode function in the H5Osdspace.c component of the HDF file processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the H5Osdspacedecode function in the H5Osdspace.c component, a library for processing HDF5 files, is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, an...

The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the SkRegion.cpp component of the Firefox ESR web browser and Thunderbird email client is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...