mariadb: server crashes in query_arena::set_query_arena upon SELECT from view

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlclass.cc, impacting availability...

The vulnerability of the form_fast_setting_wifi_set() function in the Tenda AC18 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formfastsettingwifiset function in the Tenda AC18 router’s microprogramming software is related to the issue of writing operations outside the buffer in memory when processing the ssid parameter. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the CONFIG_IP_DEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux-based operating systems allows a hacker to cause a service failure.

The vulnerability of the CONFIGIPDEFRAG function in the implementation of the IP packet defragmentation algorithm for U-Boot bootloaders of embedded Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious...

The vulnerability of the sapi/cgi/cgi_main.c component of the PHP programming language interpreter allows a attacker to cause a service failure.

The vulnerability of the sapi/cgi/cgimain.c component of the PHP programming language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the php_escape_html_entities_ex function (ext/standard/html.c) in the PHP language interpreter allows a attacker to trigger a service failure or possibly cause other effects.

The vulnerability of the phpescapehtmlentitiesex function ext/standard/html.c in the PHP language interpreter is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures or potentially cause other adverse effects...

The vulnerability of the fread function (ext/standard/file.c) in the PHP programming language allows a hacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the fread function ext/standard/file.c in the PHP programming language interpreter is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service failures or potentially other adverse effects...

The vulnerability of the wddx_stackdestroy function in the PHP programming language allows a hacker to trigger a service failure or potentially cause other effects.

The vulnerability of the wddxstackdestroy function ext/wddx/wddx.c in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially have other effects through an XML documen...

The vulnerability of the jdhcpd daemon in Junos OS operating systems, which allows a hacker to cause a service failure.

The vulnerability of the jdhcpd daemon in Junos OS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

GLSA-202107-06 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-06 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : A remote attacker...

The vulnerability of the ALIGN_UP macro in the Unbound DNS server allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ALIGNUP macro in the Unbound DNS server is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

CVE-2021-37033

There is an Injection attack vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...

The vulnerability of the copyIntoFrameBuffer function in software for storing OpenEXR images with a wide dynamic range of brightness levels, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the copyIntoFrameBuffer function in software for storing OpenEXR images with a wide dynamic range of brightness is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the Libvirt virtualization management library is related to errors in the certificate validation process. These errors allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Libvirt virtualization management library is related to errors in the certificate validation process. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ESIExpression::Evaluate function in the Squid proxy server lies in the fact that it allows the output of operations within acceptable data buffer limits. This enables attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ESIExpression::Evaluate function of the Squid proxy server is related to the execution of operations within acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability of Google Chrome’s browser storage, related to the operation of pushing operations beyond the data buffer’s allowable limits, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s browser storage relates to the operation of operations that exceed the permissible data buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

DEBIAN-CVE-2020-27751

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long long as well as a shift exponent that is too large for 64-bit type...

The vulnerability of Intel Ethernet Series 700 controllers, related to access control deficiencies, allows attackers to trigger a service failure or increase their privileges.

The vulnerability of Intel Ethernet Series 700 controllers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

The vulnerability of the ikev1_n_print() function in the tcpdump network traffic capture and analysis tool allows a hacker to induce a service failure.

The vulnerability of the ikev1nprint function print-isakmp.c, a utility for capturing and analyzing network traffic using tcpdump, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2020-9092

HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...

UBUNTU-CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...