2615 matches found
Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43452)
Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by the Cisco Catalyst 9800 seri...
Cisco IOS and IOS XE Denial of Service Vulnerability (CNVD-2021-43447)
Cisco IOS and IOS XE are both operating systems developed by Cisco in the United States for its network devices. A denial of service vulnerability exists in the PROFINET handler for Link Layer Discovery Protocol LLDP messages in Cisco IOS and IOS XE, which can be exploited by an attacker to cause...
Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43440)
Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial of service vulnerability exists in Cisco IOS XE, which can be exploited by an attacker to cause the device to reload by sending Ethernet frames to the Ethernet segment...
CVE-2020-25600
An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm either bitness ones. 32-bit x86 domain...
The vulnerability of the State Repository Service component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the State Repository Service component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
CVE-2020-4581
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.12 could allow a remote attacker to cause a denial of service by sending a chunked transfer-encoding HTTP/2 request. IBM X-Force ID: 184441...
Denial Of Service (DoS)
Linux kernel is vulnerable to denial of service DoS. The vulnerability exists indrivers/net/fjes/fjesmain.c in the Linux kernel does not check the allocworkqueue return value, leading to a NULL pointer dereference...
The vulnerability of the Windows Work Folders Service in Windows operating systems allows a hacker to exploit their privileges.
The vulnerability of the Windows Work Folders Service in Windows operating systems arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
GHSA-HRPP-F84W-XHFG Outdated Static Dependency in vue-moment
Versions of vue-moment prior to 4.1.0 contain an Outdated Static Dependency. The package depends on moment and has it loaded statically instead of as a dependency that can be updated. It has [email protected] that contains a Regular Expression Denial of Service vulnerability. Recommendation Upgrade t...
The vulnerability of Windows operating system’s folder service allows a hacker to increase their privileges.
The vulnerability of Windows operating system’s folder service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...
JVN#50890770: Apache Struts 2 vulnerable to denial-of-service (DoS)
Apache Struts 2 provided by The Apache Software Foundation contains a denial-of-service DoS vulnerability CWE-400. Impact An attacker may be able to cause a denial-of-service DoS. Solution Update the Software Update to the latest version according to the information provided by the developer Appl...
mysql: C API unspecified vulnerability (CPU Jan 2020)
Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...
CVE-2020-9243
HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user installing and execute a malicious application. Successful exploit could cause a denial of service...
SUSE-SU-2020:14442-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmmtimeouthander in file arch/s390/mm/cmm.c bnc1172999. - CVE-2020-14416: Fixed a race condition in...
Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 3.1.6-alt1
Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...
The vulnerability of the Windows Modules Installer service in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Modules Installer service in Windows operating systems is related to file handling errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Microsoft Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows Credential...
OPENSUSE-SU-2020:1002-1 Security update for python-ipaddress
This update for python-ipaddress fixes the following issues: - Add CVE-2020-14422-ipaddress-hash-collision.patch fixing CVE-2020-14422 bsc1173274, bpo41004, where hash collisions in IPv4Interface and IPv6Interface could lead to DOS. This update was imported from the SUSE:SLE-15:Update update...
Microsoft Windows Network Connections Service elevation of privilege vulnerability (CNVD-2020-52923)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Network Connections...