CVE-2020-35381

jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...

Denial of Service Vulnerability in Softmedia Rubik's Cube

SoftMedia Magic is a system optimization software. SoftMedia Magic has a denial of service vulnerability that can be exploited by attackers to cause a computer crash BSOD with a constructed program...

Nut/OS Denial of Service and Remote Code Execution Vulnerabilities

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from using the length byte of a domain name in a DNS query/response f...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-75686)

Foxit Reader is a PDF document reader. Foxit Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service or crash of the application...

SUSE-SU-2020:3729-1 Security update for clamav

This update for clamav fixes the following issues: clamav was updated to 0.103.0 to implement jscECO-3010 and bsc1118459. clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possible thanks to a community effort. -...

CURL-CVE-2020-8285 FTP wildcard stack overflow

libcurl offers a wildcard matching functionality, which allows a callback set with CURLOPTCHUNKBGNFUNCTION to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns...

Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) Exploit

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6.3 Tested on:...

Denial Of Service (DoS)

pngcheck is vulnerable to denial of service DoS. The vulnerability exists through checkchunkname when parsing a file...

Denial of Service Vulnerability in MITSUBISHI FX3U-ENET-L

FX3U-ENET-L has 4 communication channels. Mitsubishi PLC Ethernet Module FX3U-ENET-L supports fixed buffer storage area communication, connection to MELSOFT, communication via MC series, and e-mail delivery. When connecting to MELSOFT, remote maintenance of PLC programs can be realized through GX...

SUSE-SU-2020:14549-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: - CVE-2020-25708 bsc1178682, libvncserver/rfbserver.c has a divide by zero which could result in DoS...

OPENSUSE-SU-2020:2025-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issues: - CVE-2020-25708 bsc1178682, libvncserver/rfbserver.c has a divide by zero which could result in DoS This update was imported from the SUSE:SLE-15:Update update project...

CVE-2020-26068

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

Cisco IoT Field Network Director 访问控制错误漏洞

Cisco IoT Field Network Director FND is a network management system for large-scale FAN deployments. An elevation of privilege vulnerability exists in the REST API of Cisco IoT Field Network Director versions prior to 4.6.1. The vulnerability stems from the software failing to properly authentica...

OPENSUSE-SU-2020:1907-1 Security update for zeromq

This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service bsc1176116. - Fixed a heap overflow when receiving malformed ZMTP v1 packets bsc1176256 - Fixed a memory leak in client induced by malicious servers...

Denial Of Service (DoS)

github.com/russellhaering/gosaml2 is vulnerable to denial of service. A NULL pointer dereference allows an attacker to crash the application via a malicious input...

Denial Of Service (DoS)

cups is vulnerable to denial of service DoS. The vulnerability exists through heap based buffer overflow in libcups's ppdFindOption in ppd-mark.c...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A memory leak in the predicateparse function in kernel/trace/traceeventsfilter.c allows an attacker to crash the kernel...

Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense Denial of Service Vulnerabilities

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance are both products of Cisco, Inc. Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services.Cisco Adaptive Security Appliance is a firewall and network security platform. Cisco...

Moderate: subversion:1.10 security update

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Security Fixes: subversion: remotely triggerable DoS vulnerability in svnserve...

OPENSUSE-SU-2020:1736-1 Security update for atftp

This update for atftp fixes the following issues: - boo1176437, CVE-2020-6097 A specially crafted sequence of RRQ-Multicast requests can trigger an assert call resulting denial-of-service...