8089 matches found
CVE-2021-40334 SSH activation problem in the proprietary management protocol (port TCP 5558)
Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...
The vulnerability of the mail client in operating systems such as iOS, iPadOS, and watchOS allows a hacker to trigger a service failure.
The vulnerability of the email client in operating systems such as iOS, iPadOS, and watchOS is related to the operation of writing data beyond the buffer in memory when processing malicious email messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of Cisco’s software algorithm, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of Cisco software algorithms is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the ngx_memcpy function in the OpenResty web server, related to buffer overflows, allows attackers to cause a service failure.
The vulnerability of the memcpy-param-overlap function in the OpenResty web server is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...
The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3s_hv_rmhandlers.S of Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3shvrmhandlers.S of Linux operating systems is related to the lack of checks for returned data during the processing of SRR1 values. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2021-43360
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...
PT-2021-8112 · Unknown +5 · Virglrenderer +5
Name of the Vulnerable Software and Affected Versions: virglrenderer affected versions not specified Description: The issue is related to an out-of-bounds write in the VirGL virtual OpenGL renderer. A malicious guest can create a specially crafted virgil resource and issue a VIRTGPU EXECBUFFER...
The vulnerability in the implementation of the tipc_crypto_key_rcv() function for the TIPC protocol, which is used for intra-cluster communication in Linux operating systems, allows a attacker to cause a service failure or gain increased privileges.
The vulnerability of the implementation of the tipccryptokeyrcv function in the Linux operating system’s Transparent Inter-Process Communication TIPC kernel relates to insufficient input validation when processing MSGCRYPTO messages. Exploiting this vulnerability can allow an attacker to cause...
The vulnerability of Windows operating system script handlers allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of Windows operating system script handlers is related to the operation of writing data beyond the buffer boundaries into memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...
Huawei HarmonyOS 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect privileges. An attacker can exploit this vulnerability to affect service availability...
The vulnerability of the check_password function in the web server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the checkpassword function in the web server of the programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code using a specially crafted reque...
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of the web-server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the web-server-based programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...
The vulnerability of JScript and VBScript script handlers in Internet Explorer, related to the execution of operations beyond the buffer boundaries, allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of JScript and VBScript script handlers in Internet Explorer is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...
Philips Patient Information Center iX 输入验证错误漏洞
Philips Patient Information Center iX Philips Patient Information Center PIC iX, a Philips company in Europe, is at the heart of our patient monitoring system, which facilitates understanding of the patient's condition and helps caregivers to identify potential deterioration at an early stage, as...
The vulnerability of the Web Transport component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Web Transport component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability in the implementation of the mm_malloc() function in the Mongoose OS operating system allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the mmmalloc function implementation in the Mongoose OS operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
CVE-2021-26336
Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...