The vulnerability of the Fly-wm file manager in the Astra Linux operating system allows a hacker to gain unauthorized access to the user’s session, as well as to cause a service failure.

The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome browsers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a denial-of-service attack through a specially crafted web page...

The vulnerability of the RubyGems package management system, related to the creation of infinite loops, allows for the execution of arbitrary code.

The vulnerability of the RubyGems package management system is related to improper handling of the tar archive header, which can lead to the creation of an infinite loop. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol allows a attacker to cause a service failure in Cisco IOS and Cisco IOS XE operating systems.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures using...

The vulnerability of the Qualcomm TrustZone component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the Qualcomm TrustZone component of the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a perpetrator to cause service interruptions...

CVE-2018-7793

A Credential Management vulnerability exists in FoxView HMI SCADA All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 CCS 9.4 and FoxView 10.5. which could cause unauthorized disclosure, modification, or disruption in service when the password is...

Denial of Service Vulnerability in Hikvision Video Playback Library SDK (CNVD-2019-00138)

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. A denial of service vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit the...

The vulnerability of the applyilters() function in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the applyilters function h5repackfilters.c in the HDF5 library is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the H5O_attr_decode() function in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the H5OattrDecode function H5Oattr.c in the HDF5 library arises from the operation leaving the buffer boundaries into memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by using a specially crafted HDF5 file...

The vulnerability of the ReadGifImageDesc() function (gifread.c) in the HDF5 library, which allows a hacker to cause a service failure

The vulnerability of the ReadGifImageDesc function in the HDF5 library arises from the occurrence of operations outside the buffer’s boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially crafted HDF5 file...

The vulnerability of the remap_struct function in the sysstat system monitoring and analysis tool allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the remapstruct function in the sysstat system performance monitoring and analysis utility arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Squid proxy server, related to accessing beyond the allocated buffer memory, allows attackers to cause a service failure.

The vulnerability of the Squid proxy server is related to an error that causes data to exceed the allocated memory buffer when processing ESI responses or loading certificates from intermediate certification centers. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the OpenSSL library, related to stack overflow, allows a hacker to cause a service failure.

The vulnerability of the OpenSSL library lies in the fact that complex ASN.1 types with recursive definitions may cause a stack overflow. Exploiting this vulnerability could allow an attacker to induce a service failure...

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite allows a attacker to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite is related to memory-related errors during the processing of the UDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the django.utils.html.urlize function, as well as the chars and words methods of the django.utils.text.Truncator object in the Django web application framework, allows attackers to trigger a denial-of-service attack.

The vulnerability of the django.utils.html.urlize function, as well as the chars and words methods of the django.utils.text.Truncator object in the Django web application framework, lies in the fact that when control over input data is possible, a malicious attacker can create a string that will...

The vulnerability of the GNU Patch Unix utility lies in insufficient validation of input data. This allows a perpetrator to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the GNU Patch software tool is related to its support for working with patches in the outdated “ed” format. This format allows for the execution of external commands using the “!” operator. Exploiting this vulnerability can enable a remote attacker to execute arbitrary code...

The vulnerability of the multimedia library libvorbis, related to the escape from memory buffer reading, allows attackers to cause service failures or compromise data confidentiality and integrity.

The vulnerability of the multimedia library libvorbis is related to an error that causes reading beyond the allocated buffer memory space. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise data confidentiality and integrity through the use of...

The vulnerability of the `pack` function in the Perl interpreter allows attackers to cause service failures, gain access to confidential data, or compromise its integrity.

The vulnerability of the pack function in the Perl interpreter is related to an error that causes overflow in the dynamic memory when writing data to it during operations involving a large number of elements within the pack function. Exploiting this vulnerability allows a remote attacker to execu...

The vulnerability of the Simple Network Management Protocol packet processor in the Cisco NX-OS operating system allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet handler in the Cisco NX-OS operating system arises due to errors in the data block verification of the SNMP protocol. Exploiting this vulnerability can allow a malicious actor to perform a reboot on the device remotely...