881 matches found
The vulnerability of the PARSEC security library function, related to insufficient data processing within the security mechanisms, allows a attacker to trigger a service failure.
The vulnerability of the PARSEC security library function is related to a failure in disabling file system protection. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the astra-safepolicy software for security configuration involves insufficient data processing within the security mechanisms, allowing attackers to trigger a service failure.
The vulnerability of the astra-safepolicy security configuration software is related to incorrect data processing in the /etc/fstab file. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the centralized system for managing user identities in Freeipa arises from insufficient data processing within the security mechanisms. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the centralized system for managing user identities in Freeipa is related to insufficient data processing within the security mechanisms. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...
The vulnerability of the fly-fm file manager, related to insufficient data processing within the security mechanisms, allows a perpetrator to trigger a service failure.
The vulnerability of the fly-fm file manager is related to the first connection of a network location via sftp. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data due to a denial-of-service attack...
The vulnerability of the fly-admin-gmc graphical control console lies in the insufficient processing of data within the security mechanisms, allowing an intruder to access confidential data.
The vulnerability of the fly-admin-gmc graphical control console is related to the incorrect display of settings for non-privileged users. Exploiting this vulnerability allows a hacker to gain access to confidential data...
Grok Buffer Overflow Vulnerability
Grok is a regular expression that uses a combination of multiple predefined . A tool used to match split text and map to keywords. Often used to preprocess log data. A security vulnerability exists in Grok versions 7.6.6 through 9.2.0 that stems from a heap-based buffer overflow in the...
Unauthorized Access Vulnerability in Apache Spark
Apache Spark is a fast, general-purpose compute engine designed for large-scale data processing. An unauthorized access vulnerability exists in Apache Spark, which can be exploited by an attacker to gain unauthorized access to sensitive information and perform unauthorized operations...
ArubaOS-Switch DoS (ARUBA-PSA-2021-002)
A security vulnerability has been identified in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...
Siemens SIMATIC NET CP 443-1 OPC UA
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC NET CP 443-1 OPC UA Vulnerabilities: Improper Input Validation, Improper Restriction of Operations within the Bounds of a Memory Buffer, Incorrect Calculation, Classic Buffer...
DRUPAL-CONTRIB-2021-010
This Open Social distribution provides a turn-key system for building customized social networks. The module doesn't sufficiently process data in certain circumstances. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access mentions"...
Open Social - Moderately critical - SQL Injection - SA-CONTRIB-2021-010
This Open Social distribution provides a turn-key system for building customized social networks. The module doesn't sufficiently process data in certain circumstances. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access mentions"...
IBM Cognos Analytics 代码问题漏洞
IBM Cognos Analytics is a suite of business intelligence software from IBM USA that provides valuable information, secure data governance and reporting. An external entity injection vulnerability exists in Cognos Analytics 11.0 and 11.1. An attacker can exploit this vulnerability to inject extern...
CVE-2021-32471
CVE-2021-32471 concerns the Marvin Minsky 1967 Universal Turing Machine implementation, where insufficient input validation in the program allows a user to execute arbitrary code via crafted data. The described scenario notes that, after processing input composed of As and Bs (rather than 0s and ...
Path traversal
IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IBM X-Force ID: 192905...
CVE-2021-0263
A Data Processing vulnerability in the Multi-Service process multi-svcs on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service DoS condition . The...
CVE-2021-0263
A Data Processing vulnerability in the Multi-Service process multi-svcs on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service DoS condition . The...
Command injection
A Data Processing vulnerability in the Multi-Service process multi-svcs on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service DoS condition . The...
CVE-2021-0263
A Data Processing vulnerability in the Multi-Service process multi-svcs on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service DoS condition . The...
CVE-2021-25141
A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...
CVE-2021-25141
A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be...