The vulnerability of Huawei’s microprogrammed router software, related to authentication errors, allows attackers to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of Huawei’s microprogrammed router software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges, execute arbitrary code, or cause service failures...

The vulnerability of the adx_write_trailer function in the libavformat library of the Ffmpeg multimedia environment, which allows a hacker to cause a service failure.

The vulnerability of the adxwritetrailer function in the libavformat library of the Ffmpeg multimedia environment is related to division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the web interface of Cisco IOS XE operating systems allows a hacker to trigger a service failure.

The vulnerability of Cisco IOS XE operating system’s web interface UI is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product...

CVE-2021-22312

There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product...

SAP warns of malicious activity targeting unpatched systems

A timely warning to keep systems patched has appeared, via a jointly-released report from Onapsis and SAP. The report details how threat actors are “targeting and potentially exploiting unprotected mission-critical SAP applications”. Some of the vulnerabilities used were weaponised fewer than 72...

Watch Out! Mission Critical SAP Applications Are Under Active Attack

Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research. "Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common securit...

CVE-2021-28183

The specific function in ASUS BMC’s firmware Web management page Web License configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the...

The vulnerability of the Chrony daemon in the implementation of the Network Time Protocol (NTP) allows a attacker to cause a service failure.

The vulnerability of the Chrony daemon in the implementation of the Network Time Protocol NTP is related to an incorrect definition of the link before accessing the file in the /var/run/chrony directory. Exploiting this vulnerability could allow a attacker to cause a service failure by using a...

The vulnerabilities of the crypto/x509 libraries and the golang.org/x/crypto/cryptobyte library in the Go programming language allow attackers to induce a service failure.

The vulnerability of the crypto/x509 libraries and golang.org/x/crypto/cryptobyte programming language is related to errors in the certificate validation process. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability of the Dovecot mail server’s components lda, lmtp, and imap, related to insufficient input data validation, allows attackers to cause service failures.

The vulnerability of the Dovecot mail server’s components lda, lmtp, and imap is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the phar_parse_zipfile function in the PHP programming language allows a perpetrator to access confidential data and also trigger a service failure.

The vulnerability of the pharparsezipfile function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for Cisco IOS XE allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP protocol implemented by Cisco IOS XE lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

The vulnerability of the lldpdecode function in the daemon/protocols/lldp.c component of the LLDP protocol under Unix systems, related to buffer overflow in memory, allows a malicious actor to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the lldpdecode function in the daemon/protocols/lldp.c component of the LLDP protocol under Unix allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability is related to buffer overflow in memory...

The vulnerability of the p11_rpc_buffer_get_byte_array_value function in the library for working with PKCS P11-kit modules, related to writing beyond the buffer’s boundaries, allows a hacker to cause a service failure.

The vulnerability of the p11rpcbuffergetbytearrayvalue function in the library for working with PKCS P11-kit modules is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which stems from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate Web...

The vulnerability of the authenticate function in the services/httpd/handler.go component of the database, related to the deficiencies in the authentication process, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability in the authenticate function of the services/httpd/handler.go component of the database backend, InfluxDB, stems from the lack of a check to ensure that a value is present in the parameter. Exploiting this vulnerability allows an attacker who operates remotely to access...

The vulnerability of the vDaemon microprogramming software for Cisco IOS XE SD-WAN allows a attacker to trigger a service failure, execute arbitrary commands, or perform a “man-in-the-middle” attack.

The vulnerability of the vDaemon microprogramming software for Cisco IOS XE SD-WAN routers lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures, execute arbitrary commands, or carry out a...

The vulnerability of the SearchController class implementation in the web application for managing phpMyAdmin database management systems allows a hacker to cause a service failure.

The vulnerability of the SearchController class implementation in the web application for managing phpMyAdmin database management systems is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service...

DEBIAN-CVE-2021-3475

There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability...