8089 matches found
CVE-2022-23970
ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...
PT-2022-10706 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.1 and earlier Liferay DXP versions 7.0 through 7.0 before fix pack 90 Liferay DXP versions 7.1 through 7.1 before fix pack 17 Liferay DXP versions 7.2 through 7.2 before fix pack 5 Description: The issue concerns t...
The vulnerability of the software development service provided by SAP NetWeaver Development Infrastructure allows attackers to disclose sensitive information or cause service failures.
The vulnerability of the software development service for SAP NetWeaver Development Infrastructure lies in the insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information or cause service failures...
Asus Rog Live Service 后置链接漏洞
ASUS Rog Live Service is a Desktop Shareware program from ASUS in China. A security vulnerability exists in ASUS Rog Live Service, which stems from a feature in ROG Live Service that deletes temporary files created by the installation without verifying the path before deletion, which can be...
CVE-2020-4925
A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...
The vulnerability of the Bidirectional Forwarding Detection (BFD) protocol implementation in Cisco NX-OS router operating systems allows a attacker to cause a service failure.
The vulnerability of the Bidirectional Forwarding Detection BFD protocol implemented in Cisco NX-OS router operating systems is related to deficiencies in rate limiting. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending unlimited traffic...
The vulnerability of the Vim text editor lies in its access to memory cells before the buffer starts, allowing an attacker to cause a service failure or execute arbitrary code.
The vulnerability of the Vim text editor relates to access to memory cells prior to the buffer’s start. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerability of the nft_fwd_dup_netdev_offload() function in the netfilter subsystem of Linux operating systems allows a hacker to increase their privileges or cause service failures.
The vulnerability of the nftfwddupnetdevoffload function in the netfilter subsystem of Linux operating systems stems from the execution of a write operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service...
HUAWEI EMUI/Magic UI 安全漏洞
HUAWEI EMUI is an Android-based mobile operating system developed by Huawei China. HUAWEI EMUI/Magic UI suffers from a denial-of-service vulnerability that can be exploited by attackers to perform DoS attacks and compromise service integrity...
The vulnerability of the ping_unhash function (net/ipv4/ping.c) in the Linux operating system allows a hacker to increase their privileges or cause service failures.
The vulnerability of the pingunhash function net/ipv4/ping.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause service interruptions...
The vulnerabilities of the `pipe_read` and `pipe_write` functions in the `fs/pipe.c` file of the Linux operating system’s kernel allow attackers to increase their privileges or cause service failures.
The vulnerability of the piperead and pipewrite functions in the fs/pipe.c file of the Linux operating system’s kernel is related to code errors. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service failures...
CVE-2022-22333
IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned...
CVE-2022-22333
IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned...
CVE-2022-22333
IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned...
The vulnerability of the email verification component (DANE) based on DNS in Cisco AsyncOS operating system for the Cisco Email Security Appliance allows a attacker to trigger a service failure.
The vulnerability of the email verification component DANE in Cisco AsyncOS operating systems for the Cisco Email Security Appliance is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2021-46701
PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord...
The vulnerability in the implementation of Google Chrome’s push-notifications allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome’s browser push-notifications implementation is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the `defineAttribute` function in the `xmlparse.c` file of the ExPat library allows a hacker to cause a service failure.
The vulnerability of the defineAttribute function in the xmlparse.c file of the ExPat library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a perpetrator to cause service interruptions...
The vulnerability of the `package_set_ring` function in the `net/packet/af_packet.c` component of the Linux kernel allows a hacker to increase their privileges within the system or cause a service failure.
The vulnerability of the packagesetring function in the net/packet/afpacket.c component of the Linux kernel is related to the reallocation of memory. Exploiting this vulnerability could allow a remote attacker to increase their privileges within the system or cause service failures...