8092 matches found
PT-2024-41490 · Ао "Нппкт" · Осон Основа Оnyx
Уязвимость функции run timers модуля net/bluetooth/mgmt.c ядра операционных систем Linux связана с использованием памяти после ее освобождения при обработке объекта struct hci dev. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...
Windows 11 VDA seamless app launches with fullscreen black border behind logon window
The customer uses windows 11 VDAs to provide access to a published application which has desktop operating system requirement. The initial launch of the published application showed the seamless application launch with a full screen black border behind the logon window. This is disruptive to user...
openldap: null pointer dereference in ber_memalloc_x function
A vulnerability was found in OpenLDAP, in bermemallocx function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service...
CVE-2024-20279
Cisco APIC (Application Policy Infrastructure Controller) is affected by an access-control vulnerability in the restricted security domain implementation used for multi-tenancy. An authenticated remote attacker with a restricted-domain user could read, modify, or delete child policies under defau...
The vulnerability of the ieee_write_file function in the /output/outieee.c component of the Netwide Assembler (NASM) compiler allows a hacker to cause a service failure.
The vulnerability of the ieeewritefile function in the /output/outieee.c component of the Netwide Assembler NASM compiler is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
UBUNTU-CVE-2024-45239
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first. Because Fort is an RPKI Relying Party, ...
UBUNTU-CVE-2024-45236
An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a signed object containing an empty signedAttributes field. Fort accesses the set's elements without sanitizing it first. Because Fort is an RPKI Relying...
K000140784: Apache HTTPD vulnerability CVE-2024-38477
Security Advisory Description null pointer dereference in modproxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue. CVE-2024-38477 Impact Attackers can exploit this...
PT-2024-9676 · Veeam · Veeam Agent For Microsoft Windows
Name of the Vulnerable Software and Affected Versions: Veeam Agent for Microsoft Windows affected versions not specified Description: The issue is related to the use of an insecure path search in Veeam Agent for Microsoft Windows, which can lead to DLL injection. If the system's PATH variable...
US Microchip Giant Hit by Cyberattack, Disrupting Operations
Microchip Technology hit by cyberattack, disrupting manufacturing operations. A major disruption to semiconductor production has been reported, impacting…...
CVE-2023-22576
Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges...
Vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems, allowing a hacker to cause service failure.
The vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-10821)
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a stack overflow found in the page parameter of the frmL7ImForm function. An attacker can exploit this vulnerability to consume server resources for the purpo...
The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a hacker to induce a service failure.
The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...
The vulnerability of the mlx5e_tx_reporter_dump_sq() function in the net/mlx5e component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the mlx5etxreporterdumpsq function in the net/mlx5e component of the Linux operating system is related to writing beyond the memory boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-43011
An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for file paths, an attacker can exploit this vulnerability by using directory traversal techniques to delete arbitrary file...
CVE-2024-4782
A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to disrupt the printer's functionality until a manual system reboot occurs...
CVE-2024-43011
An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for file paths, an attacker can exploit this vulnerability by using directory traversal techniques to delete arbitrary file...
The vulnerability of the command-line interface of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the command-line interface of Juniper Networks’ Junos OS and Junos OS Evolved is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created certificate file...