8 matches found
CVE-2026-72555 Peppermint Lab Peppermint - Broken Access Control
A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...
The vulnerability of the client request handler of the security access control system, IED Siemens RUGGEDCOM CROSSBOW, allows a perpetrator to enhance their privileges.
The vulnerability of the client request handler of the Siemens RUGGEDCOM CROSSBOW access control system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges by adding user accounts to administrative groups...
The vulnerability of the Texture Client Handler component in the Firefox browser arises from a race condition that occurs when operations are performed outside of the buffer boundaries in memory. This allows an attacker to trigger a service failure.
The vulnerability of the Texture Client Handler component in the Firefox browser is caused by a race condition that occurs outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted web page...
PT-2019-1342
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 65 Description The issue is caused by a buffer overflow in the Texture Client Handler component of the Firefox browser, allowing a remote attacker to potentially cause a denial of service using a specially crafted web...
CVE-2008-4163
Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service UDP client handler termination via unknown vectors...
Debian Security Advisory DSA 3271-1 (nbd - security update)
Tuomas Rsnen discovered that unsafe signal handling in nbd-server, the server for the Network Block Device protocol, could allow remote attackers to cause a deadlock in the server process and thus a denial of service. Tuomas Rsnen also discovered that the modern-style negotiation was carried out ...
CVE-2008-4163
Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service UDP client handler termination via unknown vectors...
CVE-2008-4163: Improper Input Validation
Unspecified vulnerability in ISC BIND 9.3.5-P2-W1, 9.4.2-P2-W1, and 9.5.0-P2-W1 on Windows allows remote attackers to cause a denial of service UDP client handler termination via unknown vectors...