CVE-2020-1818

There are multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities...

Huawei Myna 安全漏洞

Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...

The Worst Hacks of 2024

From Chinese cyberspies breaching US telecoms to ruthless ransomware gangs disrupting health care for millions of people, 2024 saw some of the worst hacks, breaches, and data leaks ever...

The vulnerability of the m68k kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the m68k kernel component in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the console-based MPEG audio player mpg123, related to the ability to write beyond the allocated memory, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the console-based MPEG audio player mpg123 lies in its ability to write beyond the allocated memory boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures...

The vulnerability of the scsidebug component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the scsidebug component in the Linux operating system’s kernel is related to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ALSA kernel component in Linux operating systems, which allows a hacker to cause a service failure

The vulnerability of the ALSA kernel component in Linux operating systems is related to improper input validation in the function sndtimerstart1. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dwmac-rk component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dwmac-rk component in the Linux operating system is related to errors in reading beyond the boundary in the rkgmacsetup function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rte_raw_cksum_mbuf() function in the vhost library, part of the libraries and drivers for fast packet processing by DPDK, allows a attacker to cause a service failure.

The vulnerability of the rterawcksummbuf function in the vhost library, which is part of the DPDK toolkit for fast packet processing, stems from a failure to properly manage the output beyond the buffer in memory when calculating the checksum. Exploiting this vulnerability could allow an attacker...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the execution of operations beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the cakedestroy() function in the sch_cake component of the Linux operating system allows a malicious actor to escalate their privileges or cause service failures.

The vulnerability of the cakedestroy function in the schcake component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

The vulnerability of the /bin/webs file in D-Link DAP-1513 wireless access points allows a hacker to cause a service failure.

The vulnerability of the /bin/webs file in D-Link DAP-1513 wireless access points is related to errors in pointer redirection due to incorrect checking of HTTP request formats. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted HTTP...

CVE-2022-32144

There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. Vulnerability ID: HWPSIRT-2022-76192 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32144...

CVE-2022-32204

There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. Vulnerability ID: HWPSIRT-2022-87185 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32204...

The vulnerability of the parse_ds64 function in the Gstreamer multimedia framework allows a hacker to cause a service failure.

The vulnerability of the parseds64 function in the Gstreamer multimedia framework is related to reading data beyond the allowable range of memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the qtdemux_parse_container function in the Gstreamer multimedia framework allows a hacker to trigger a service failure.

The vulnerability of the qtdemuxparsecontainer function in the Gstreamer multimedia framework is related to reading data beyond the permitted range in memory during the execution of this function. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the gst_gdk_pixbuf_decFlush function in the Gstreamer multimedia framework allows a attacker to cause a service failure.

The vulnerability of the gstgdkpixbufdecFlush function in the Gstreamer multimedia framework is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qtdemux_parse_sbgp function in the Gstreamer multimedia framework, which allows a hacker to cause a service failure.

The vulnerability of the qtdemuxparsesbgp function in the Gstreamer multimedia framework is related to the use of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Ruijie Reyee OS operating system lies in the premature release of resources during its operation period. This allows attackers to interrupt legitimate user sessions and cause service failures.

The vulnerability of the Ruijie Reyee OS is related to the premature release of resources during its operation. Exploiting this vulnerability allows a remote attacker to interrupt a legitimate user’s session and cause service failures...

CVE-2024-11144 Race Condition with LightFTP

The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the crash occurs during file upload or download, it...