The vulnerability of the vDaemon process in the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.

The vulnerability of the vDaemon process in Cisco SD-WAN is due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of Intel Graphics Driver drivers, related to zero-division errors, allows a hacker to cause a service failure.

The vulnerability of Intel Graphics Drivers’ drivers is related to division by zero errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2020-27822

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...

Design/Logic Flaw

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...

Binary Vulnerability in Rexchip Chip (CNVD-2020-67105)

With a R&D team specializing in system-on-chip design and algorithm research, Rexchip Microelectronics Corporation provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control and other fields. A binary...

Design/Logic Flaw

A vulnerability that can hijack a DLL file that is loaded during productsLGPCSuiteSetup, IPSFULLHD, LGULTRAWIDE, ULTRAHDDriver Setup installation into a DLL file that the hacker wants. Missing Support for Integrity Check vulnerability in COMPONENT of LG Electronics LGPCSuiteSetup, IPSFULLHD,...

Node.js third-party modules: [systeminformation] Command Injection via insecure command formatting

I would like to report a Command Injection vulnerability in the systeminformation package. It allows an attacker to inject arbitrary OS commands. Module Module name: systeminformation Version: 4.26.10 npm page: https://www.npmjs.com/package/systeminformation Module Description System and OS...

The vulnerability of the enterprise-level catalog service 389 Directory Server, related to the execution of operations outside the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the enterprise-level catalog service 389 Directory Server lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2020-3713

Name of the Vulnerable Software and Affected Versions: Puma versions prior to 3.12.5 Puma versions prior to 4.3.4 Description: The issue is related to the handling of HTTP requests in Puma, a RubyGem for Ruby/Rack applications. An attacker could smuggle an HTTP response by using an invalid...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress website content management system is related to a configuration error. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-27210)

The NETGEAR R6400, among others, is a wireless router from NETGEAR. An injection vulnerability exists in multiple NETGEAR products and can be exploited by an attacker to cause the system or product to be parsed or interpreted in an incorrect manner...

Arbitrary file deletion vulnerability in WeLive online customer service system

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

The vulnerability of the Windows Graphics component of the operating system allows attackers to exploit their privileges.

The vulnerability of the Windows Graphics component of the operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Seagate Central Storage Remote Code Execution Vulnerability

Seagate Central Storage is a home network drive made by Seagate for home and small office use. A remote code execution vulnerability exists in Seagate Central Storage, which can be exploited by an attacker to execute code...

Vulnerability of the npf_flower_spawn_phy_reprs() function (drivers/net/ethernet/netronome/nfp/flower/main.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the nfpflowerspawnPhyReprs function drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Vulnerabilities of Windows operating systems, related to authentication deficiencies, allow attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

Oracle Berkeley DB Component Access Control Error Vulnerability (CNVD-2019-29180)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming libraries, it can be with C, C++, Java, Perl, Python, Tcl and many other languages for binding. data Store is one of the data storage components. A security vulnerability exists in the Data Store...

CVE-2019-1010025

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthreadcreated thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability...

Microsoft Windows GDI Component Information Disclosure Vulnerability (CNVD-2019-24750)

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. An information disclosure vulnerability exists in Microsoft Windows GDI Component, which can be exploited by an attacker to cause an information disclosure that could lead...

hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)

Microprocessors use a ‘load port’ subcomponent to perform load operations from memory or IO. During a load operation, the load port receives data from the memory or IO subsystem and then provides the data to the CPU registers and operations in the CPU’s pipelines. Stale load operations results ar...