Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS has a security vulnerability that originates from a version upgrade judgment vulnerability in the user profile module, which can be exploite...

The vulnerability of the ChangeFriendlyName() function in the IoT device’s microprogramming system of Belkin Smart Outlet V2 F7c063 allows a perpetrator to trigger a service failure.

The vulnerability of the ChangeFriendlyName function in the IoT device’s microprogramming software of Belkin Smart Outlet V2 F7c063 is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially crafted UPNP...

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software lies in improper cleaning or release of resources, allowing a intruder to trigger a service failure.

The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted GET request...

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Exper, arises from deficiencies in the separation of the controlled system area. This allows a intruder to carry out unauthorized maintenance actions.

The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to perform a service failure remotely...

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers allows a intruder to trigger a service failure.

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the service operation...

The vulnerability in the web interface of Cisco NX-OS and FXOS router devices from Cisco UCS Fabric Interconnect allows a attacker to trigger a service failure.

The vulnerability of the web interface of Cisco NX-OS and FXOS router devices from Cisco UCS Fabric Connect is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted HTTP request...

The vulnerability of the built-in software of the ARIS controller, related to uncontrolled resource consumption, allows a intruder to cause a service failure.

The vulnerability of the built-in software of the ARIS controller is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted network packet...

The vulnerability of the built-in software of the ARIS controller lies in the ability to load files of a harmful type without limitation, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the built-in software of the ARIS controller is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the built-in software of the ARIS controller, related to reading data outside the buffer in memory, allows a intruder to perform a service failure.

The vulnerability of the built-in software of the ARIS controller is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to perform a service failure through a specially crafted request...

The vulnerability of the built-in software of the ARIS controller, related to authentication errors, allows a intruder to trigger a service failure.

The vulnerability of the built-in software of the ARIS controller is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted network packet...

The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, allows a malicious actor to cause a service failure.

The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the iopt_unmap_iova_range() function in the drivers/iommu/iommufd/io_pagetable.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ioptunmapiovarange function in the drivers/iommu/iommufd/iopagetable.c file of the Linux kernel is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of strongSwan, caused by a full overflow of integers (assuming that the cache of certificates in memory is full), allows a malicious actor to trigger a service failure.

The vulnerability of strongSwan is caused by a numerical overflow condition assuming that the cache of certificates in memory is full. Exploiting this vulnerability can allow an attacker who operates remotely to cause a service failure...

The vulnerability of the bq24190_remove() function in the drivers/power/supply/bq24190_charger.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the bq24190remove function in the drivers/power/supply/bq24190charger.c file of the Linux kernel is related to the use of previously freed memory due to concurrent access to resources i.e., a race condition. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the ksmbd module in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the ksmbd module in Linux operating systems is related to the improper release of resources. Exploiting this vulnerability allows a remote attacker to cause service failures using the SMB2SESSIONSETUP command...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a perpetrator to trigger a service failure.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failure using specially...

The vulnerability of the ksmbd module in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the ksmbd module in Linux operating systems is related to the improper release of resources. Exploiting this vulnerability allows a remote attacker to cause service failures using the SMB2SESSIONSETUP command...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a hacker to trigger a service failure.

The vulnerability of the web-based management interface for Microprogramming Software on Cisco Small Business Series Switches is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted request...

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Ribose RNP library in the Thunderbird email client allows a hacker to cause a service failure.

The vulnerability of the Ribose RNP library in the Thunderbird email client is related to insufficient validation of input data during the analysis of PKESK/SKESK packets. Exploiting this vulnerability could allow a malicious actor to cause service failures...