The vulnerability of the Binary_string::free_buffer() function in the /sql/sql_string.h component of the MariaDB database, which allows a attacker to cause a service failure.

The vulnerability of the Binarystring::freebuffer function in the /sql/sqlstring.h component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability of the Twisted Web HTTP 1.1 module of the Twisted.web.http network framework allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Twisted Web HTTP 1.1 module of the Twisted.web.http network framework in Twisted is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Hints::Hints function (poppler/Hints.cc) in the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the Hints::Hints function in the Poppler PDF rendering library is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service interruptions through a specially created PDF file...

The vulnerability of the sldns_bget_token par DNS server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sldnsbgettoken-par function in the DNS server is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Dict::find() function in the Dict.cc component of the Poppler PDF handling library allows a attacker to cause a service failure.

The vulnerability of the Dict::find function in the Dict.cc component of the Poppler PDF handling library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created PDF file...

The vulnerability of the MariaDB database lies in the use of memory after it is freed, allowing an attacker to cause a service failure.

The vulnerability of the MariaDB database lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

The vulnerability of the ItemArg args component in the MariaDB database, which allows a hacker to cause service failure.

The vulnerability of the ItemArg args component in the MariaDB database lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure through a specially crafted SQL query...

expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

A use-after-free flaw was found in the Expat package, caused by destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memory situations. This may lead to availability disruptions...

CVE-2022-20935

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

CVE-2022-39036

The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service...

Authentication flaw

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service...

CVE-2022-39038

The CVE concerns Flowring Technology’s Agentflow BPM Enterprise Management System. Affected component: improper authentication that allows a remote attacker with general user privileges to rename a user account, enabling arbitrary account privilege escalation and potential to access, manipulate, ...

PT-2022-5499 · Microsoft · Network Policy Server +1

Name of the Vulnerable Software and Affected Versions: Network Policy Server NPS affected versions not specified Description: The issue is related to insufficient input validation in the Network Policy Server NPS of Microsoft Windows operating systems. It allows a remote attacker to cause a denia...

PT-2022-7451

Name of the Vulnerable Software and Affected Versions Net-SNMP versions 5.8 through 5.9.3 Description The issue is related to a NULL Pointer Exception bug in the handle ipDefaultTTL function. This bug can be exploited by a remote attacker with write access to cause the instance to crash via a...

The vulnerability in the interface for accessing the chrome.mediaGalleries media gallery in Google Chrome and Microsoft Edge browsers allows a attacker to cause a service failure.

The vulnerability of the interface for accessing the chrome.mediaGalleries media gallery in Google Chrome and Microsoft Edge browsers is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially creat...

The vulnerability of the FortiClient NAC (fcnacd) operating system allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the FortiOS operating system’s FortiClient NAC fcnacd is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by sending a specially crafted request...

The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware of Cisco Analog Telephone Adapter (ATA) series 190 devices allows a perpetrator to cause a service failure.

The vulnerability of the Cisco Discovery Protocol implementation in microprogrammed software for Cisco Analog Telephone Adapter ATA devices of the 190 series is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause servi...

CVE-2022-40741

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service...

CVE-2022-40741

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service...

Command injection

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service...