The vulnerability of many components of the ZeroMQ messaging system, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of many components of the ZeroMQ messaging system is related to a bug in the resource management mechanism. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

The vulnerability of the getChunkOffsetTableSize() function in software for storing OpenEXR images with a wide dynamic range in brightness levels, related to out-of-buffer writing, allows attackers to cause service interruptions.

The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files, related to integer overflow, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and caus...

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the PhpFastCache PHP library, related to deficiencies in the deserialization mechanism, allows attackers to trigger a denial-of-service attack.

The vulnerability of the PhpFastCache PHP library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ImageMagick image processing component, a console-based graphic editor, relates to reading data beyond the allowed buffer size. This allows attackers to cause service interruptions.

The vulnerability of the ImageMagick image processing component relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

Information disclosure

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

CVE-2021-33214

CVE-2021-33214 affects HMS Networks eCatcher prior to or up to version 6.6.4. The vulnerability arises from weak filesystem permissions that could allow malicious users to access files, potentially leading to sensitive information disclosure, modification of configuration files, or disruption of ...

CVE-2021-33214

In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation...

DarkSide Ransomware: Best Practices for Preventing Business Disruption from Ransomware Attacks

Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework, Version 9. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of...

The vulnerability of the XML Xerces-C library, related to memory usage after it is freed, allows attackers to access confidential information or cause service failures.

The vulnerability of the Xerces-C library for working with XML is related to incorrect DTD scanning. Exploiting this vulnerability allows an attacker to gain access to confidential information or cause service failures...

Pexip Infinity Input Validation Error Vulnerability (CNVD-2022-20149)

Pexip Infinity Pexip video conferencing cloud collaboration platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity's call setup is vulnerable to an input validation error. An unauthenticated remote attacker can use this vulnerability to trigg...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to buffer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the `bufferedReadPixels` function in software for storing OpenEXR images with a wide dynamic range of brightness levels arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the bufferedReadPixels function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability in the `src/lib/openjp2/pi.c` file of the OpenJPEG image encoding and decoding library occurs when the output of certain operations exceeds the allowable buffer data size. This allows an attacker to trigger a service failure.

The vulnerability in the src/lib/openjp2/pi.c component of the OpenJPEG image encoding and decoding library is related to the execution of operations that exceed the allowable buffer size limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability in the `src/lib/openjp2/pi.c` file of the OpenJPEG image encoding and decoding library, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability in the src/lib/openjp2/pi.c component of the OpenJPEG image encoding and decoding library is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Pexip Infinity 输入验证错误漏洞

Pexip Infinity Pexip video conferencing cloud collaboration platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity's call setup is vulnerable to an input validation error. An unauthenticated remote attacker can use this vulnerability to trigg...