Denial of Service Vulnerability in OMRON CJ1M-PA205C (CNVD-2021-03524)

OMRON CJ1M-PA205C is a controller product of Controllers series of OMRON Automation China Co. A denial of service vulnerability exists in the OMRON CJ1M-PA205C, which can be exploited by an attacker to cause a denial of service attack...

CVE-2020-36066

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

CVE-2020-35488

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

Denial of Service Vulnerability in Tenda AC23

The Tenda AC23 is a $100 router. A denial of service vulnerability exists in the Tenda AC23. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully constructed packet to a specific destination address...

Genivia gSOAP WS-Security plugin denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Genivia gSOAP 2.8.107 Product URLs...

MantisBT SQL注入漏洞

MantisBT is a lightweight, free and open source, web-based defect tracking system. A SQL injection vulnerability exists in the "access" parameter of the mcprojectgetusers function in MantisBT 2.24.3. An attacker can exploit this vulnerability via API SOAP to conduct SQL injection attacks...

SUSE-SU-2020:3939-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issues: - CVE-2019-19906: Fixed an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet bsc1159635...

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to gain access to protected information.

The vulnerability of the Windows Error Reporting registration service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Denial of Service Vulnerability in Time Stamp (Windows Client) (CNVD-2020-75029)

Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...

GLSA-202012-11 : c-ares: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-11 c-ares: Denial of service It was discovered that c-ares incorrectly handled certain DNS requests. Impact : A remote attacker, able to trigger a DNS request for a host of their choice by an application linked against...

SUSE-SU-2020:3918-1 Security update for clamav

This update for clamav fixes the following issues: clamav was updated to 0.103.0 to implement jscECO-3010 and bsc1118459. clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possible thanks to a community effort. -...

Denial of service vulnerability in Huichuan-H0U-XP software (HTodEditor) (CNVD-2021-00650)

Shenzhen Huichuan Technology Co., Ltd. focuses on automation, digitalization and intelligence in the industrial field, and concentrates on the core technologies of "information layer, control layer, drive layer, execution layer and sensing layer". A denial of service vulnerability exists in...

CVE-2020-35381

jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...

CVE-2020-35381

jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call...

Denial of Service Vulnerability in Softmedia Rubik's Cube

SoftMedia Magic is a system optimization software. SoftMedia Magic has a denial of service vulnerability that can be exploited by attackers to cause a computer crash BSOD with a constructed program...

Nut/OS Denial of Service and Remote Code Execution Vulnerabilities

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from using the length byte of a domain name in a DNS query/response f...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-75686)

Foxit Reader is a PDF document reader. Foxit Reader has a denial of service vulnerability that can be exploited by attackers to cause a denial of service or crash of the application...

SUSE-SU-2020:3729-1 Security update for clamav

This update for clamav fixes the following issues: clamav was updated to 0.103.0 to implement jscECO-3010 and bsc1118459. clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possible thanks to a community effort. -...

CURL-CVE-2020-8285 FTP wildcard stack overflow

libcurl offers a wildcard matching functionality, which allows a callback set with CURLOPTCHUNKBGNFUNCTION to return information back to libcurl on how to handle a specific entry in a directory when libcurl iterates over a list of all available entries. When this callback returns...

Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) Exploit

Exploit Title: Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Exploit Author: 1F98D Original Author: Matteo Malvica Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.6.3/inSync6.6.3r102156.msi Version: 6.6.3 Tested on:...