The vulnerability of the coffgen.c component in the GNU Binutils development environment allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the coffgen.c component in the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures using a specially created PE file...

OpenJDK: certificate path validation issue during client authentication (8309966)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise...

The vulnerability of the library for serializing and deserializing YAML documents in SnakeYAML, related to buffer overflow in the stack, allows attackers to cause a service failure.

The vulnerability of the YAML serialization and deserialization library SnakeYAML lies in buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the image.cpp component in the Exiv2 media metadata management library allows a hacker to cause a service failure.

The vulnerability of the image.cpp component in the Exiv2 metadata management library involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the _TIFFmemcpy function in the libtiff library, which allows a hacker to cause a service failure

The vulnerability of the TIFFmemcpy function in the libtiff library is related to writing beyond the buffer boundaries into memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the function cxgb4_cleanup_tc_flower() in the driver drivers/net/ethernet/chelsio/cxgb4/cxgb4_tc_flower.c of the Chelsio cxgb4 driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the cxgb4cleanuptcflower function in the drivers/net/ethernet/chelsio/cxgb4/cxgb4tcflower.c file of the Chelsio cxgb4 driver for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the MP4SdpAtom::Read() function in the atom_sdp.cpp component of the library for creating, modifying, and reading MP4 files, mp4v2, allows a malicious actor to cause a service failure.

The vulnerability of the MP4SdpAtom::Read function in the atomsdp.cpp component of the library for creating, modifying, and reading MP4 files in mp4v2 is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2023-6652 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.4 through 21.4R3-S3 Juniper Networks Junos OS versions 22.1 through 22.1R3-S3 Juniper Networks Junos OS versions 22.2 through 22.2R2-S1, 22.2R3 Juniper Networks Junos OS versions 22.3 through 22.3R2 Junip...

PT-2023-12611 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns incomplete read and write permission verification in the GPU module. Successful exploitation may affect service confidentiality,...

CVE-2023-34162

Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail...

Huawei HarmonyOS 访问控制错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a broadcast receive unauthenticated type vulnerability in the background proxy alert...

The vulnerability of the Radare2 reverse-engineering framework lies in its memory management mechanism after objects are freed. This allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the reverse-engineering framework Radare2 relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE allows a hacker to trigger a service failure.

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the _hss_attval_style function in the HTML-StripScripts module, which is used to delete scripts from HTML documents, allows a hacker to trigger a service failure.

The vulnerability of the hssattvalstyle function in the HTML-StripScripts module, which is used to delete scripts from HTML documents, is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service...

SUSE CVE-2016-0505

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options...

SUSE CVE-2019-2708

Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data...

SUSE CVE-2019-2983

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

SUSE CVE-2022-21323

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication...

PT-2022-28246 · Bitly · Bitly

Name of the Vulnerable Software and Affected Versions: Bitly affected versions not specified Description: A change in the link quota policy for free tokens has been implemented, reducing the quota to 50 per month, effective December 8, 2022. This change renders the service less useful, leading to...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...