2615 matches found
CVE-2021-36967
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...
CVE-2021-36967
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...
CVE-2021-32132
The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
ROS-2-1952
2.1952 Denial of service in libX11CVE-2021-31535 1. Vulnerability Description: The vulnerability allows a local user to execute a denial of service DoS attack. The vulnerability exists due to insufficient validation of color names in the XLookupColor function. A local user can launch a specially...
F5 BIG-IP Advanced WAF and ASM MySQL database denial of service vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 BIG-IP Advanced WAF and ASM MySQL database denial of service vulnerability is associated with a policy on Virtul Serve...
CVE-2018-10790
The AP4CttsAtom class in Core/Ap4CttsAtom.cpp in Bento4 1.5.1.0 allows remote attackers to cause a denial of service application crash, related to a memory allocation failure, as demonstrated by mp2aac...
SUSE-SU-2021:2761-1 Security update for rubygem-puma
This update for rubygem-puma fixes the following issues: - CVE-2021-29509: Incomplete fix for CVE-2019-16770 allows Denial of Service bsc1188527...
OPENSUSE-SU-2021:1148-1 Security update for grafana
This update for grafana fixes the following issues: - CVE-2021-27358: unauthenticated remote attackers to trigger a Denial of Service via a remote API call bsc1183803 - Update to version 7.5.7: Updated relref to 'Configuring exemplars' section 34240 34243 Added exemplar topic 34147 34226 Quota: D...
Denial Of Service (DoS)
library/std/src/net/parser.rs in Rust is vulnerable to denial of service. It does not properly consider extraneous zero characters at the beginning of an IP address string, which in some situations allows attackers to bypass access control that is based on IP addresses, because of unexpected octa...
PT-2021-3813 · Microsoft · Windows Services For Nfs +1
Name of the Vulnerable Software and Affected Versions: Windows Services for NFS affected versions not specified Description: The issue is related to insufficient access restrictions in the ONCRPC XDR Driver of Windows Services for NFS, allowing a remote attacker to gain unauthorized access to...
CVE-2021-33597
A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service DoS of the...
SUSE-SU-2021:2617-1 Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.2.39 bsc1182739 - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. bsc1185870 - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. bsc1185872 - CVE-2021-2180: InnoDB unspecified vulnerability...
MGASA-2021-0377 Updated python-urllib3 package fixes security vulnerabilities
The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given via proxyconfig doesn't verify the hostname of the certificate. This means certificates for...
Code injection
tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service DOS...
libheif Denial of Service Vulnerability (CNVD-2022-06517)
libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. libheif version 1.4.0 suffers from a denial-of-service vulnerability. The vulnerability stems from a floating-point exception in the Fraction function. An attacker could exploit this vulnerability to cause a denial of servi...
CVE-2020-19469
An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8...
Huawei EulerOS: Security Advisory for python-pygments (EulerOS-SA-2021-2228)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2021:2274-1 Security update for kubevirt
This update for kubevirt fixes the following issues: General: - Updated kubevirt to version 0.40.0 - Fixed an issue when calling virsh-domcapabilities - Fixed the the wrong registry path for containers. Security fixes: - CVE-2021-20286: A flaw was found in libnbd 1.7.3. An assertion failure in...
OPENSUSE-SU-2021:1854-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.10.2 - CVE-2021-29957: Fixed partial protection of inline OpenPGP message not indicated bsc1186198. - CVE-2021-29956: Fixed Thunderbird stored OpenPGP secret keys without master password protection bsc1186199....