5415 matches found
The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to incorrect session duration settings. This allows a perpetrator to disclose protected information or cause service failures.
The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure or gain unauthorized access to protected information.
The vulnerability of the Cisco AsyncOS operating system’s web server interfaces, such as Cisco Web Security Appliance, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service interruptions or gain unauthorized access to protected...
The vulnerability of the ReadSIXELImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the ReadSIXELImage function in the ImageMagick console-based graphics editor coders/sixel.c arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
The vulnerability of the Apache HTTP Server web server, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service interruptions.
The vulnerability of the Apache HTTP Server is related to the issue of operations going beyond the buffer in memory after reaching the read size limit for HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server allows a attacker to cause service failures or lead to incorrect server configuration.
The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures or lead to incorrect server configuration...
The vulnerability of the mod_cache_socache module in the Apache HTTP Server, related to reading data beyond the buffer’s acceptable limit, allows attackers to cause service failures.
The vulnerability of the modcachesocache module in the Apache HTTP Server relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Cesanta Mongoose Input Validation Error Vulnerability
Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. An input validation error vulnerability exists in Cesanta Mongoose. The vulnerability stems from a network system or...
The vulnerability of the JunOS operating system, related to the SSL-Proxy function, allows a hacker to cause a service failure.
The vulnerability of the JunOS operating system is related to the SSL-Proxy function, which fails to handle hardware resource limitations. Exploiting this vulnerability allows a remote attacker to trigger repeated failures of the flowd daemon, which can lead to service interruption if the user...
The vulnerability of Modicon microprogrammed control devices, related to a data processing error in the REST API, allows a perpetrator to trigger a service failure.
The vulnerability of Modicon microprogrammed control devices is related to a data processing error in the REST API. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...
The vulnerability of the difflib.IS_LINE_JUNK method in the Python interpreter allows a attacker to cause a service failure.
The vulnerability of the difflib.ISLINEJUNK method in the Python interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the json_populate_recordset and jsonb_populate_recordset functions in the PostgreSQL database management system allows a hacker to cause a service failure or gain unauthorized access to protected information.
The vulnerability of the jsonpopulaterecordset and jsonbpopulaterecordset functions in the PostgreSQL database management system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to...
The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to disclose protected information or cause service failures.
The vulnerability of the Web interface for Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose...
The vulnerability of the MagickRealloc function in the memory.c file of the cross-platform graphics library GraphicsMagick, which allows a hacker to trigger a service failure.
The vulnerability of the MagickRealloc function in the cross-platform graphics library GraphicsMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created .dpx file...
The vulnerability of the coders/tiff.c component in the cross-platform library for working with graphics in GraphicsMagick, which allows a hacker to trigger a service failure.
The vulnerability of the coders/tiff.c component in the cross-platform library for working with graphics in GraphicsMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially crafted RGB TIFF...
The vulnerability of the WPG reading module in the cross-platform library for working with GraphicsMagick allows a hacker to induce a service failure.
The vulnerability of the WPG reading module in cross-platform libraries for working with GraphicsMagick is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2019-5294
There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal...
Envoy Denial of Service Vulnerability
Envoy is an open source distributed proxy server . Envoy has a denial of service vulnerability that can be exploited by remote attackers to cause a denial of service...
The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file is related to numerical processing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
The vulnerability of the MP4A packetizer (modules/packetizer/mpeg4audio.c) in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the mp4a packetizer modules/packetizer/mpeg4audio.c in the VideoLAN VLC media player software is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to read, modify, or delete data, or to cause a service failure.
The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data, or cause service interruptions through...