The vulnerability of the `zmLoadUser()` function (zm_user.cpp) in the video surveillance software for organizations called ZoneMinder, which allows a intruder to execute arbitrary code or cause service interruptions.

The vulnerability of the zmLoadUser function in the ZoneMinder video surveillance software’s code involves a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the tiffimage_int.cpp component in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the tiffimageint.cpp component in the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Wi-Fi WPA Supplicant client, related to deficiencies in authentication procedures, allows attackers to trigger a service failure.

The vulnerability of the Wi-Fi WPA Supplicant client is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the TiledInputFile function in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, allows attackers to trigger a service failure.

The vulnerability of the TiledInputFile function in software for storing images with a wide dynamic range of brightness in OpenEXR is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the lsx_aiffstartwrite function in the aiff.c component of the Sound eXchange audio editor allows a hacker to cause a service failure.

The vulnerability of the lsxaiffstartwrite function in the aiff.c component of the Sound eXchange audio editor is related to insufficient comparison. Exploiting this vulnerability could allow an attacker to cause service interruptions...

SPAM SQR 代码注入漏洞

Softnext Technologies SPAM SQR is a comprehensive email filtering platform from China-based Softnext Technologies. A code injection vulnerability exists in SPAM SQR versions prior to 2.221231, which stems from a code injection flaw. An attacker can exploit this vulnerability to execute system...

The vulnerability of the connected module “Kaspersky Security System” of the Eltex network interface “ESR-200” allows a intruder to cause a service failure.

The vulnerability of the connected module “Kaspersky Security System” of the Ethernet switch software “Eltex ESR-200” is related to the improper creation of connections. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Tbase database server in the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to trigger a service failure.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software solution is related to incorrect checking of the returned value from methods or functions. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Tbase database server in the software solution for monitoring the status of B&R APROL industrial systems allows a intruder to trigger a service failure.

The vulnerability of the Tbase database server of the B&R APROL industrial system monitoring software solution is related to incorrect checking of the returned value from methods or functions. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Secure Channel component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Secure Channel component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of Dell Enterprise SONiC operating systems, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of Dell Enterprise SONiC operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of Microsoft Edge browser, related to improper resource release, allows attackers to trigger a service failure.

The vulnerability of Microsoft Edge relates to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

K19501795: BIG-IP HTTP profile vulnerability CVE-2019-6631

Security Advisory Description iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs. CVE-2019-6631 Impact The...

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

SUSE CVE-2015-0830

The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service application crash via crafted WebGL content...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved and Junos operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved and Junos operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...