5427 matches found
The vulnerability of Firefox browser relates to the issue of allowing operations to exceed the permissible data buffer limits. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Firefox browser is related to the execution of operations that exceed the allowable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
The vulnerability in the implementation of the process for launching child elements in the Firefox sandbox broker allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, or cause service failures.
The vulnerability of the process for launching child elements in the Firefox sandbox broker’s sandbox environment is related to a file truncation error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise its integrity, or cause...
The vulnerability of several functions in hw/usb/core.c of the QEMU hardware emulation software involves allowing operations to exceed the permissible buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of several functions in the hw/usb/core.c file of the QEMU hardware emulation software is related to the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrit...
The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.
The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...
The vulnerability of QEMU’s emulation software-related hardware software involves exceeding the permissible buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of QEMU’s emulation software-related hardware lies in the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability in the implementation of the ConvolvePixel() function in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to gain unauthorized access to protected information or cause service failures.
The vulnerability in the implementation of the ConvolvePixel function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability of JIT optimization in Firefox browsers, related to access to data without type control, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of JIT optimization in Firefox browsers relates to access to data without type control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of Firefox browser relates to the issue of allowing operations to exceed the permissible data buffer limits. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Firefox browser is related to the execution of operations that exceed the allowable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...
CVE-2021-21446
SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service...
CVE-2021-1057
NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects...
The vulnerability of the KVM GET_EMULATED_CPUID request in Linux kernel, related to the operation exceeding the data buffer’s permissible limits, allows an attacker to compromise data integrity and cause service failures. [source-iocs-preserved const=KVM_GET_EMULATED_CPUID]
The vulnerability of the KVM GETEMULATEDCPUID function in Linux operating systems is related to the operation exceeding the permissible data buffer limits. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures. source-iocs-preserved...
The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises relates to the use of exploits after release. This allows attackers to gain access to protected information, execute arbitrary code, or cause a service failure.
The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises, is related to the use of after-release components. Exploitation of this vulnerability can allow attackers to access protected...
CVE-2020-9093
There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...
The vulnerability of the X-server fly-dm, related to the bypassing of authentication due to a fundamental error, allows attackers to gain access to protected information, compromise its integrity, and cause service failures.
The vulnerability of the X-server fly-dm involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability allows an attacker who operates remotely to gain access to protected information, compromise its integrity, and cause service failures...
The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as the Microsoft Office suite, stems from insufficient validation of input data. This allows attackers to gain access to protected information, execute arbitrary code, or cause service interruptions.
The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as the Microsoft Office suite, is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to access protected information, execute arbitrary code, or cause...
CVE-2020-9201
There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal...
The vulnerability of the `get_next_file` function in the UNIX utility `tcpdump` involves a lack of mechanism for checking the size of input data. This leads to the output data exceeding the buffer’s capacity, allowing attackers to access protected information, cause service failures, or compromise the availability of information.
The vulnerability of the getnextfile function in the UNIX utility tcpdump is related to a lack of mechanism for checking the size of input data, resulting in the output operation being within the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to protecte...
The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.
The vulnerabilities of the Firefox browser, Firefox ESR, and the Thunderbird email client are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...
The vulnerability of the _open_index function in the FpxImagePlugin.py library, a library for working with images from Pillow, related to integer overflow, allows a hacker to cause a service failure.
The vulnerability of the openindex function in the FpxImagePlugin.py library, a library for working with images, relates to a lack of mechanisms for controlling resource consumption. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...
The vulnerability of the mbfl_filt_conv_big5_wchar function in the PHP interpreter allows a hacker to access protected information or cause service failures.
The vulnerability of the mbflfiltconvbig5wchar function in the PHP interpreter arises due to an operation being performed outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...