8089 matches found
The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
CVE-2021-44158
ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...
CVE-2021-45916
The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...
Authentication flaw
The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...
Input validation
The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...
Sun & Moon Rise Shockwall system 输入验证错误漏洞
The Sun & Moon Rise Shockwall System is a computer endpoint protection system from Sun & Moon Rise, a Chinese company, that suffers from a security vulnerability that could be exploited to send malicious responses to servers to partially disrupt service...
CVE-2021-45916
The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...
The vulnerability in the sound/usb/mixer.c component of the Linux operating system, which occurs when the operation exceeds the permissible buffer data limits, allows an attacker to access confidential information or cause service failures.
The vulnerability in the sound/usb/mixer.c component of the Linux kernel is related to the operation of pushing data beyond the buffer’s allowed limits. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE routers cBR-8 allows a attacker to cause a service failure.
The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE routers cBR-8 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Fortinet FortiWeb Resource Management Error Vulnerability (CNVD-2024-26508)
Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...
Improper Input Validation
Apache Parquet is vulnerable to improper input validation. The vulnerability exits in util.java of parquet-mr which allows an attacker to perform service disruption using malicious parquet files...
The vulnerability of the UAS emulation device’s hardware emulation by QEMU, related to writing beyond the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the UAS emulation device’s hardware emulation software, QEMU, lies in the lack of flow number verification. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the VIRTIO_GPU_CMD_GET_CAPSET command in the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the VIRTIOGPUCMDGETCAPSET command in the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the RGW component of the Ceph storage system, which is related to insufficient validation of input data, allows a attacker to trigger a service failure.
The vulnerability of the RGW component of the Ceph storage system is related to incorrect processing of URL addresses that end with two slashes. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code or trigger service interruptions.
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of programmable logic controllers MELSEC iQ-R, MELSEC Q, and MELSEC L, related to uncontrolled resource consumption, allows a intruder to cause malfunctions during maintenance operations.
The vulnerability of the programmable logic controllers MELSEC iQ-R, MELSEC Q, and MELSEC L is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause malfunctions in the service provided by the controller, using...
The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome is related to insufficient resource management during its existence. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions through a specially created malicious web...
The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending a specially crafted request...
The vulnerability of the mod_proxy_uwsgi function in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modproxyuwsgi function in the Apache HTTP Server is related to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure for an application through a uri-path request...