The vulnerability of the Yaws WebDAV server implementation lies in the improper restriction of XML links to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Yaws WebDAV server implementation is related to XXE injections. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Brotli data compression algorithm lies in the lack of a mechanism to verify the size of the copied data. This allows attackers to compromise the integrity of the data and also cause service failures.

The vulnerability of the Brotli data compression algorithm is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the data and also cause service interruptions...

CVE-2021-27275

This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controllers stems from insufficient validation of input data. This allows a intruder to trigger malfunctions during maintenance operations.

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M340 programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially...

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include...

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include...

CVE-2020-9213

There is a denial of service vulnerability in some huawei products. In specific scenarios, due to the improper handling of the packets, an attacker may craft many specific packets. Successful exploit may cause some services to be abnormal. Affected products include some versions of NGFW Module,...

The vulnerability of the image conversion module from TIFF to RGBA format in the LibTIFF library allows a hacker to induce a service failure.

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

The vulnerability in the `pp_tokline` function of the `asm/preproc.c` file of the NASM assembler for the x86 processor architecture allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pptokline function in the asm/preproc.c file of the x86 architecture NASM assembler is related to the repeated release of a memory area. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability of the SNMP proxy server Squid lies in the lack of resource release after the expiration of its valid period of operation. This allows a hacker to trigger a service failure.

The vulnerability of the SNMP proxy server Squid lies in the lack of resource release after the expiration of its valid period of operation. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability in the scheduling component of the Google Chrome browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s browser scheduling component relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the WebAudio component in the Google Chrome browser allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s WebAudio component is related to the execution of operations that exceed the allowable buffer data limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Google Chrome browser’s background fetch component allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome browser’s background fetch component is related to the operation of pushing operations beyond the acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and caus...

The vulnerability of the SerialPort component in the Google Chrome browser allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SerialPort component in Google Chrome browsers is related to insufficient checks on policies. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions...

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the TightDecoder::FilterGradient function in the VNC TigerVNC software allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the TightDecoder::FilterGradient function in the VNC TigerVNC software is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to access to data without type control, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the HPACK decoder in HAProxy server software allows for exploitation by reading data beyond the allowed buffer limits, enabling attackers to cause service failures.

The vulnerability of the HPACK decoder in HAProxy server software relates to reading data from buffer fields beyond their allowable limits. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Google Chrome’s browser password managers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s browser password managers is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the `Exiv2::StringValueBase::read` function in the `value.cpp` library of the Exiv2 media metadata management library is related to the issue of allowing the operation to exit within acceptable buffer limits. This allows a malicious actor to cause a service failure.

The vulnerability of the Exiv2::StringValueBase::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...