8239 matches found
The vulnerability of the Windows AppX Deployment Server component on Windows operating systems allows a hacker to trigger a service failure.
The vulnerability of the Windows AppX Deployment Server component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the module for syntactic analysis of PDF files in the ClamAV antivirus program allows a hacker to trigger a service failure.
The vulnerability of the PDF file syntax analysis module in the ClamAV antivirus program exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Security Bulletin: wscanhw and wscansw vulnerabilities in scanner component of IBM License Metric Tool v9, v7.5, 7.2.2, IBM Endpoint Manger for Software Use Analysis v9 and IBM Tivoli Asset Discovery for Distributed v7.5, v7.2.2
Summary CIT scanner component contains format string vulnerability in wscanhw executable and stack overflow vulnerability in wscansw executable. Successful exploitation of the vulnerabilities allows for scanner process manipulation, and possibly crashing the process. Vulnerability Details CVEID:...
Emotet Malware Destroys Itself From All Infected Computers
Emotet, the notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks, was automatically wiped from infected computers en masse following a European law enforcement operation. The development comes three months after a coordinated disruption of Emote...
CVE-2021-2299
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
The vulnerability of the syntax analysis function for domain name records in the Simotics Connect 400 software and hardware suite allows a perpetrator to cause service interruptions.
The vulnerability of the syntax analysis function for DNS domain names in the Simotics Connect 400 software/hardware suite is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the PDFium PDF-content processor in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.
The vulnerability of the PDFium PDF-content processing component in Google Chrome and Microsoft Edge browsers is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created web page...
The vulnerability of the Grafana data processing web tool, related to server-side manipulation of queries, allows attackers to gain unauthorized access to protected information or cause service failures.
The vulnerability of the Grafana data processing web tool is related to server-side manipulation of queries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
The vulnerability of the Easy Virtual Switching System (VSS) software, developed by Cisco IOS XE, affects Cisco Catalyst 4500 and Cisco Catalyst 4500-X network devices. This vulnerability allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the Easy Virtual Switching System VSS microprogramming software for Cisco IOS XE network devices from the Cisco Catalyst 4500 series and Cisco Catalyst 4500-X series is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or...
The vulnerability of the implementation of the TCP/IP protocol stack allows a attacker to cause a service failure.
The vulnerability of the Stacked Protocols implementation of TCP/IP is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the syntax analysis function for domain name records in the Simotics Connect 400 software and hardware suite allows a perpetrator to cause service interruptions.
The vulnerability of the syntax analysis function for DNS domain names in the Simotics Connect 400 software and hardware suite is related to errors that occur when a line or array is terminated with the NULL character. Exploiting this vulnerability could allow an attacker to cause service...
The vulnerability of the Unity-firefox-extension package in the Ubuntu operating system allows a hacker to trigger a service failure.
The vulnerability of the Unity-firefox-extension package in the Ubuntu operating system is related to resource release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
EFB Tampering 2. Device Integrity
TL;DR Electronic Flight Bag EFB integrity varies between different airlines and devices Aviation cyber security is becoming increasingly prominent with regulators EFBs often connect to unsecure networks including public Wi-Fi Security measures are not always effective and can be inconsistent Devi...
The vulnerability of embedded software developed by Qualcomm, related to the swapping of a non-trusted pointer, allows a malicious actor to execute arbitrary code or cause service failures.
The vulnerability of microprogramming software in embedded Qualcomm chips relates to the use of an unreliable pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by reproducing specially created MKV files...
The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.
The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...
The vulnerability of the cmd.exe command-line interpreter of the Windows operating system allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the cmd.exe command-line interpreter of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...
Siemens network software vulnerabilities, related to buffer overflows in dynamic memory, allow attackers to execute arbitrary code or cause system failures.
The vulnerability of Siemens network software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...
The vulnerability of the JunOS operating system’s SRX series routers’ implementation of the Internet Content Adaptation Protocol (ICAP) allows attackers to enhance their privileges, execute arbitrary code, or cause service failures.
The vulnerability of the Internet Content Adaptation Protocol ICAP implementation in the JunOS operating system’s SRX series routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to enhance their privileges,...
The vulnerability of JunOS operating system’s MX series routers lies in the simultaneous execution using shared resources with improper synchronization, allowing attackers to escalate their privileges, execute arbitrary code, or cause service failures.
The vulnerability of the JunOS operating system’s MX series routers lies in the simultaneous execution of processes using shared resources with incorrect synchronization. Exploiting this vulnerability allows a remote attacker to enhance their privileges, execute arbitrary code, or cause service...
Microsoft SharePoint 输入验证错误漏洞
SharePoint is a web-based collaboration platform that integrates with Microsoft Office.SharePoint Server is one of the versions of SharePoint that is installed on a customer's IT infrastructure and is designed to give an organization greater control over the behavior or design of...