ROS-2-1771

2.1771 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

The vulnerability of Django’s software platform’s `forms.FileField` and `forms.ImageField` components allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the forms.FileField and forms.ImageField components in the Django web application framework is related to insufficient validation of entered data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the Apache Struts software platform, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Apache Struts software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the redis-cli interface of the Redis database management system allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the redis-cli interface of the Redis database management system is related to improper restrictions on operations within memory buffers. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures,...

The vulnerability of the Apache Struts software platform, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Apache Struts software platform is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Vulnerabilities of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools, related to insufficient validation of input data, allow attackers to trigger service failures.

The vulnerabilities of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, are related to insufficient testing of input data. Exploiting these vulnerabilities can allow attackers to cause system failures...

The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks allows attackers to trigger service failures or gain access to confidential information.

The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks relates to reading beyond the boundary. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain access to confidential information...

The vulnerability affects the runtime of procedure calls in the Windows operating system, allowing an attacker to cause a service failure.

The vulnerability of remote procedure call runtime in the Windows operating system stems from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability in the set of Sysinternals system utilities for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability in the Sysinternals system utilities for Windows operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the HTTP library for Rust Hyper, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the HTTP library for Rust Hyper relates to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using specially created data...

CVE-2023-34162

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail...

PT-2023-24701 · Huawei · Hms Core

Name of the Vulnerable Software and Affected Versions: HMS Core affected versions not specified Description: The issue is related to a version update determination vulnerability in the user profile module. Successful exploitation of this vulnerability may cause repeated HMS Core updates and lead ...

The vulnerability of Juniper Networks’ Junos operating system in Junos ACX2K Series devices, which allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks’ Junos operating system in ACX2K Series devices is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

The vulnerability of the SIP ALG firewall on Juniper Networks Junos operating systems on devices with MS-MPC or MS-MIC interfaces allows a attacker to cause a service failure.

The vulnerability of the SIP ALG server on Juniper Networks’ Junos operating system on devices with MS-MPC or MS-MIC interfaces is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the microprogramming software for WAGO CC100 programmable logic controllers and the microprogramming software for WAGO Touch Panel 600 sensors is related to insufficient verification of input data.

The vulnerability of the microprogramming software used in WAGO CC100 programmable logic controllers and the microprogramming software for WAGO Touch Panel 600 sensors is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to gain access to...

The vulnerability of the FrameworkX.exe executable file of the Proficy Machine Edition programming software for programmable logic controllers allows a attacker to trigger a service failure.

The vulnerability of the FrameworkX.exe executable file of the Proficy Machine Edition programming software for programmable logic controllers involves insufficient validation of input data during the processing of the dynamic library fxVPStatcTcp.dll. Exploiting this vulnerability can allow an...

The vulnerability of the anonymous web browser Tor, related to improper cleaning or release of resources, allows a violator to trigger a service failure.

The vulnerability of the anonymous web browser Tor is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the fusbhub.sys library in software for remote connection and control of Flexihub USB devices allows a hacker to cause a service failure.

The vulnerability of the fusbhub.sys library in software for remote connection and control of USB devices like Flexihub is related to pointer swapping errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Codesys industrial automation software suite is related to errors in the assignment of the zero pointer, which allows a malicious actor to trigger a service failure.

The vulnerability of the Codesys industrial automation software suite is related to errors in the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...