Path traversal

FusionSphere OpenStack V100R006C00SPC102NFVhas a path traversal vulnerability. Due to insufficient path validation, an attacker with high privilege may exploit this vulnerability to cover some files, causing services abnormal...

The vulnerability of the Wi-Fi component of the iOS operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the iOS operating system’s Wi-Fi component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corruption by using specially...

The vulnerability of the decode_digit function in the puny_decode.c library allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the decodedigit function in the punydecode.c library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions or other adverse effects from a remote location...

The vulnerability in the TCP transmission rate limitation mechanism, known as TCP-rottling, in the software Connected Grid Network Management System and IoT Field Network Director allows a perpetrator to cause a service failure and restart the device.

The vulnerability in the TCP throughput rate-limiting mechanism of the Connected Grid Network Management System and IoT Field Network Director software involves insufficient protection for the throughput rate limit requiring additional memory. Exploiting this vulnerability allows a malicious acto...

The vulnerability of the DNS server Dnsmasq, related to buffer overflows, allows attackers to cause a service failure or execute arbitrary code.

The vulnerability of the Dnsmasq DNS server arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to cause a service failure or execute arbitrary code by sending specially crafted DNS packets...

The vulnerability of Xen hypervisors, related to errors in access rights comparison, allows attackers to increase their privileges or cause service failures.

The vulnerability of Xen hypervisors is related to access authorization errors that occur when permissions for guest x86 operating systems running in PV mode are removed or changed. Exploiting this vulnerability can allow a local attacker to increase their privileges or cause service failures...

The vulnerability of the `xt_alloc_table_info` function in the kernel’s `net/netfilter/x_tables.c` file in the Linux operating system allows a hacker to escalate their privileges or cause service interruptions.

The vulnerability of the xtalloctableinfo function in the kernel’s net/netfilter/xtables.c file in the Linux operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to increase their privileges or cause a service failure memory...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component of Orac...

Unspecified Vulnerability in Oracle VM VirtualBox Component

Oracle Virtualization is a set of hardware and software virtualization management solutions from Oracle. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core subcomponent of the Oracle VM VirtualBox component in Oracle Virtualization,...

CVE-2017-10361

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: OHC DRS. The supported version that is affected is 8.0.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-10620

Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks. Affected...

PT-2017-11415

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D71 Junos OS versions 12.3X48 prior to 12.3X48-D55 Junos OS versions 15.1X49 prior to 15.1X49-D110 Description The issue allows a man-in-the-middle attacker to inject bogus signatures, potentially...

CVE-2017-10620: Improper Certificate Validation

Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus updates. This may allow a man-in-the-middle attacker to inject bogus signatures to cause service disruptions or make the device not detect certain types of attacks. Affected...

DEBIAN-CVE-2014-9092

libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif marker...

The vulnerability of the McAfee Application Control control tool stems from deficiencies in access control. This allows attackers to increase their privileges, cause service interruptions, or execute arbitrary code.

The vulnerability of McAfee Application Control relates to deficiencies in access control. Exploiting this vulnerability can allow a local attacker to enhance their privileges, cause service interruptions, or execute arbitrary code using IOCTLs...

The vulnerability in the embedded microprogramming software of the IP-stack service for Huawei Campus series network switches models S2300, S2700, S3300, S3700, S5300EI, S5700EI, S5300SI, S5700SI, S5300HI, S5700HI, S6300EI, S6700EI, S5710HI, S5300LI, S5700LI, S2350EI, S2750EI, S5720HI, S7700, S9300, S9700 allows a intruder to cause service failure.

The vulnerability of the embedded microprogramming software of the IP-stack service for Huawei Campus series network switches, such as S2300, S2700, S3300, S3700, S5300EI, S5700EI, S5300SI, S5700SI, S5300HI, S5700HI, S6300EI, S6700EI, S5710HI, S5300LI, S5700LI, S2350EI, S2750EI, S5720HI, S7700,...

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router allows a hacker to cause a service failure and reboot the device.

The vulnerability of the embedded microprogramming software of the D-Link DIR-615L router exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failure and reboot the device by using an unauthorized GET request...

Huawei FusionSphere Authorization Issues Vulnerability

Huawei FusionSphere, a product of Huawei, is a cloud operating system product developed based on the OpenStack framework. Huawei FusionSphere suffers from an authorization issue vulnerability, which can be exploited by an attacker to execute arbitrary commands, which in turn can query, modify, an...

The vulnerability of the `timerfd.c` component in the Linux kernel (fs/timerfd.c), which allows a hacker to increase their privileges and cause a service failure

The vulnerability of the timerfd.c component fs/timerfd.c in the Linux operating system is related to the parallel execution of operations on file descriptors. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

The vulnerability of the NFSv4 protocol in the Solaris operating system, which allows a hacker to trigger a service failure

The vulnerability of the NFSv4 protocol in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions such as downtime or, in rare cases, forced shutdowns of the system...