2605 matches found
Denial Of Service (DoS)
libvncserver is vulnerable to denial of service DoS. The vulnerability exists as HandleCursorShape allows integer overflow resulting in heap-based buffer overflow...
The vulnerability of the Windows Network Connections service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Network Connections service in operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Dell EMC Data Protection Advisor OS Command Execution Vulnerability
Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery and data replication management. A security vulnerability exists in the REST API in Dell EMC Data Protection Advisor. An attacker could exploit this...
CVE-2020-0871
An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Service Information Disclosure Vulnerability'...
CVE-2013-1753
The gzipdecode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service memory consumption via a crafted HTTP request...
PT-2020-1912
Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service BITS versions prior to the fixed version Description The issue is related to errors in handling symbolic links that display paths to files and directories. This can allow an attacker to elevate...
The vulnerability of the Windows Data Sharing Service, a data exchange service for the Windows operating system, allows attackers to escalate their privileges.
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Nanda Aotomo Technology NATouch Touch Screen Configuration Software has Denial of Service Vulnerability
Nanda Aotuo Technology Jiangsu Co., Ltd. is committed to independent research, development and production of cutting-edge industrial control products with reliable performance, excellent quality and advanced technology. There is a denial-of-service vulnerability in the NATouch touchscreen...
CVE-2014-1617
Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of service...
OpenTFTP 1.66 - Local Privilege Escalation
OpenTFTP 1.66 - Local Privilege Escalation Exploit Title: OpenTFTP 1.66 - Local Privilege Escalation Exploit Author: boku Date: 2020-02-12 Vendor Homepage: https://sourceforge.net/projects/tftp-server/ Software Link:...
OpenTFTP 1.66 - Local Privilege Escalation Vulnerability
Exploit Title: OpenTFTP 1.66 - Local Privilege Escalation Exploit Author: boku Vendor Homepage: https://sourceforge.net/projects/tftp-server/ Software Link: https://sourceforge.net/projects/tftp-server/files/tftp%20server%20single%20port/OpenTFTPServerSPInstallerV1.66.exe/download Version: 1.66...
OPENSUSE-SU-2020:0142-1 Security update for shadowsocks-libev
This update for shadowsocks-libev fixes the following issues: - Update version to 3.3.3 Refine the handling of suspicious connections. Fix exploitable denial-of-service vulnerability exists in the UDPRelay functionality boo1158251, CVE-2019-5163 Fix code execution vulnerability in the ss-manager...
Denial Of Service (DoS)
libvirglrenderer.so is vulnerable to denial of service DoS. When a malicious command to launch a grid is provided without a Compute Shader CS, it leads to texture allocation failure and a null pointer dereference in vrendrendererresourceallocatedtexture...
KeePass 2.44 Denial Of Service
Exploit Title : KeePass 2.44 - Denial of Service PoC Product : KeePass Password Safe Version : Help About KeePass Help any local help area Drag&Drop HTML File Save the contents to html. Payload-1: DoS & Run Cmd //=0;i-- tryo+=x.c" + "harAti;catchereturn o;f"\"function fx,yvar i,o=\"\\\""+...
Important: 389-ds-base
Issue Overview: 389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker wi...
TaskCanvas 1.4.0 - Registration Denial Of Service
TaskCanvas 1.4.0 - Registration Denial Of Service Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.ht...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Hos...
CVE-2019-17147
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 80 by default. When parsing the Hos...
Razer: User Access Control Bypass Via Razer elevated service ( RzKLService.exe ) which loads exe in misconfigured way.
The tester discovered a Cortex related service suffered from a code path vulnerability that could lead to escalation of privilege. Razer thanks the tester for his report and helping keep our users secure...
MGASA-2020-0006 Updated shadowsocks-libev packages fix security vulnerabilities
Updated shadowsocks-libev packages fix security vulnerabilities: Exploitable denial-of-service vulnerability exists in the UDPRelay functionality CVE-2019-5163. Code execution vulnerability in the ss-manager binary CVE-2019-5164...