Windows Network Address Translation (NAT) Denial of Service Vulnerability

...

Microsoft Windows NAT Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Windows NAT. The following products and editions are affected:Windows 10 Version 1803 for x64-based Systems,Windows 10 Version 1809 for x64-based...

PT-2021-2420 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the implementation of Network Address Translation NAT technology in Windows operating systems. This vulnerability is associated...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2021-374)

This update for java-180-openjdk fixes the following issues : - Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

Jiangxi Jinger Technology Co., Ltd. knows that there is an XSS vulnerability in cloud document translation

Zhiyun Literature Translation is a dissertation translation tool. Jiangxi Jinger Technology Co. Zhiyun Literature Translation suffers from an XSS vulnerability, which can be exploited by attackers to obtain user cookie information...

openSUSE Security Update : opera (openSUSE-2021-139)

This update for opera fixes the following issues : - Update to version 73.0.3856.344 - CHR-8265 Update chromium on desktop-stable-87-3856 to 87.0.4280.141 - DNA-90625 Mac Crash at opera::TabView:: GetPaintDataopera::TabState const - DNA-90735 Crash at opera::BrowserSidebarModel::GetItemVisible...

DLL Hijacking Vulnerability in Netease Youtao Dictionary PC Version (CNVD-2021-05433)

Youdao Dictionary is the world's first all-around free language translation software based on search engine technology, produced by NetEase Youdao, NetEase Youdao Dictionary PC terminal dll hijacking vulnerability. There is a DLL hijacking vulnerability in Netease Youdao Dictionary PC, which can ...

UBUNTU-CVE-2020-35479

MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is always unsafe for HTML in a month value. This affects MediaWiki 1.12.0 and later...

CVE-2020-24336

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. Thi...

CVE-2020-29540

API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web...

CVE-2020-29539

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

CVE-2020-29539

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

Cross site scripting

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

Design/Logic Flaw

API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web...

CVE-2020-29539

A Cross-Site Scripting XSS issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote authenticated user run JavaScript from a malicious site...

CVE-2020-29539

The CVE-2020-29539 entry concerns a Cross-Site Scripting (XSS) vulnerability in the WebUI Translation component of Systran Pure Neural Server prior to version 9.7.0. The issue allows a remote, authenticated attacker to cause a victim user to execute JavaScript from a malicious site via the affect...

CVE-2020-29540

API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web...

CVE-2020-29540

Systran Pure Neural Server (prior to version 9.7.0) contains an API-level vulnerability in the Translation API feature that can be exploited to use the server as a Denial-of-Service proxy. An attacker can flood a destination host on any TCP port with translation requests, even when no web service...

Contiki and Contiki-NG Buffer Error Vulnerabilities

Contiki is an open source cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. Contiki-NG and Contiki suffer from a buffer error vulnerability that stems from a function...

CVE-2020-29540: Undefined Security Weakness

API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sending a large amount of translation requests to a destination host on any given TCP port regardless of whether a web...