Rockwell Automation DriveTools SP and Drives AOP

1. EXECUTIVE SUMMARY CVSS v3 7.5 Vendor : Rockwell Automation Equipment : DriveTools SP and Drives AOP Vulnerability : Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability may result in privilege escalation and total loss of device confidentiality,...

Unspecified Vulnerability in Oracle MySQL Client (CNVD-2020-17121)

Oracle MySQL is an open source relational database management system from Oracle. An unspecified vulnerability exists in Oracle MySQL Client. An attacker could exploit this vulnerability to cause a denial of service hangs or frequent crashes, affecting data availability...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

HTTP/2: flood using empty frames results in excessive resource consumption

A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability...

The vulnerability of the Security component of the MICROS Lucas software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Security component of the MICROS Lucas software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected information through HTTP requests...

CVE-2017-14018

An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed,...

aws-cfn-bootstrap Local Code Execution Vulnerability

aws-cfn-bootstrap versions prior to 1.4-22.14 suffer from a local code execution vulnerability. aws-cfn-bootstrap local code execution as root ============================================== The latest version of this advisory is available at:...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.26-1-4kc-malta package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libxi package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rpm package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the linux-image-rpc package of the Debian GNU/Linux operating system may be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

KLA10025 DoS vulnerability in GOM Media Player

An unspecified vulnerability was found in the GOM Media Player. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to an unknown application via a specially designed .WAV file. Original advisories N...

KLA10231 DoS vulnerability in browser

An unspecified vulnerability was found in the browsers. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed web site. Original advisories - Related products Mozilla-Firefox K-Meleon Netscape CVE list...

wu-ftpd S/KEY authentication overflow

The remote Wu-FTPd server seems to be vulnerable to a remote overflow. This version contains a remote overflow if s/key support is enabled. The skeychallenge function fails to perform bounds checking on the name variable resulting in a buffer overflow. With a specially crafted request, an attacke...

ICECast HTTP basic authorization DoS

The remote server runs ICECast 2.0.0, an open source streaming audio server. This version is affected by a remote denial of service. An remote attacker could send specially crafted URL, with a long string passed in an Authorization header that will result in a loss of availability for the service...

wu-ftpd < 2.6.3 'MAIL_ADMIN' Overflow Vulnerability

The remote Wu-FTPd server seems to be vulnerable to a remote flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WU-FTPD MAIL_ADMIN Function Remote Overflow

Th remote Wu-FTPD server fails to properly check bounds on a pathname when Wu-Ftpd is compiled with MAILADMIN enabled resulting in a buffer overflow. With a specially crafted request, an attacker can possibly execute arbitrary code as the user Wu-Ftpd runs as usually root resulting in a loss of...

WU-FTPD S/KEY Authentication ftpd.c skey_challenge Function Remote Overflow

This version of WU-FTPD contains a remote overflow if s/key support is enabled. The skeychallenge function fails to perform bounds checking on the name variable resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary code resulting in a loss of integrit...