120 matches found
The vulnerability of the DNS Response Handler component of the Universal Monitoring System Agent in Zabbix allows a attacker to trigger buffer overflows.
The vulnerability of the DNS Response Handler component of the Zabbix universal monitoring agent is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a buffer overflow...
The vulnerability of the GSER and HID USB host on Azure RTOS USBX interfaces allows a perpetrator to execute arbitrary code.
The vulnerability of the GSER and HID USB interfaces in Azure RTOS USBX is related to insufficient checking of exclusive states due to the pointer being set to an expired value. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...
The vulnerability of Juniper Networks Junos OS devices in the SRX series allows a hacker to cause a service failure.
The vulnerability of Juniper Networks Junos OS devices in the SRX series is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted packets...
The vulnerability of the Packet Forwarding Engine (PFE) module of the JunOS operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in the JunOS operating system is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Cipher.update_into function in the Python programming language-based cryptography interpreter allows a attacker to compromise the integrity and accessibility of the output data.
The vulnerability of the Cipher.updateinto function in the Python programming language’s cryptographic library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of the...
The vulnerability of the Cisco Discovery Protocol implementation in Cisco Unified Communications Manager (CM) and Cisco Unified Communications Manager Session Management Edition (SME) systems allows a attacker to cause service interruptions.
The vulnerability of the Cisco Discovery Protocol implementation in Cisco Unified Communications Manager CM and Cisco Unified Communications Manager Session Management Edition SME systems is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could all...
The vulnerability of the openssl extension (ext/openssl/openssl.c) in the PHP programming language interpreter allows a attacker to cause a service failure.
The vulnerability of the openssl extension ext/openssl/openssl.c in the PHP programming language interpreter is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
GSD-2022-1000848 RDMA/cma: Do not change route.addr.src_addr outside state checks
RDMA/cma: Do not change route.addr.srcaddr outside state checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.103 by commit...
The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted packets...
The vulnerability of Juniper Networks Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states, allowing a hacker to trigger a service failure.
The vulnerability of Juniper Networks’ Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states during packet processing in MPLS. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
CVE-2020-27925
An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call...
CVE-2020-27925
An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call...
Code injection
An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call...
CVE-2020-27925
An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call...
The vulnerability of the BGP protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.
The vulnerability of the BGP protocol implementation in Cisco IOS XR lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Eclipse Mosquitto messaging broker, related to insufficient checking of exclusive states, allows a hacker to trigger a service failure.
The vulnerability of the Eclipse Mosquitto messaging broker is related to insufficient checking of exceptional states. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a SUBSCRIBE packet containing approximately 65,400 or more characters '/'...
CVE-2019-6205
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the drivers/media/platform/msm/camerav2/pproc/cpp/msmcpp.c file in Qualcomm’s Android operating system is related to the lack of flow state checking. Exploiting this vulnerability can allow a remote attacker to increase their privileges through a specially created application...
Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context
The vulnerability of the kernel in iOS and Mac OS X operating systems exists due to insufficient checking of resource states when resources are allowed to be shared among processes. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a...
Mozilla Firefox and Firefox ESR SVG Document Handling Buffer Overflow Vulnerability
Mozilla Firefox is an open source web browser.Firefox ESR is an extended support version of Firefox. Mozilla Firefox's 'AddWeightedPathSegLists' and 'SVGPathSegListSMILType::Interpolate' functions are missing the state checking, allowing remote attackers to build special SVG documents for...