The vulnerability of the Audio component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during the playback of WMA format files. Exploiting this vulnerability can allow an attacker to cause system failures or execute arbitrary code...

Vulnerability of the vmw_execbuf_tie context driver’s function in the vmwgfx driver (drivers/gpu/vmxgfx/vmxgfx_execbuf.c) in the Linux operating system, which allows a malicious actor to increase their privileges or cause service failures.

The vulnerability of the vmwexecbuftie context driver function in the vmwgfx driver file: drivers/gpu/vmxgfx/vmxgfxexecbuf.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges or...

The vulnerability of the GATT Generic Attribute Profile implementation in the Bluetooth protocol stack for the Linux BlueZ operating system allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the GATT Generic Attribute Profile implementation in the Bluetooth protocol stack for the Linux BlueZ operating system is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the component drivers/firmware/EFI/capsule-loader.c of the Linux operating system allows a hacker to increase their privileges or cause service failures.

The vulnerability of the drivers/firmware/efi/capsule-loader.c component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause service interruptions...

The vulnerability of the libIEC61850 library, related to reading data outside the buffer in memory, allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

CVE-2022-26394

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail...

ATTACKER COULD PREVENT ANY OTHER USERS FROM MINTING SYNTHETIC TOKENS

Lines of code Vulnerability details An attacker can repeatedly call mint followed by burn after depositing some collateral with deposit. If this is appropriately sized and timed, it can cause the mint call to fail for another user due to the check here that is called during mint here. Every time ...

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to induce a service failure.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 routers lies in the copying of buffers without checking the size of the input data during the processing of the telnetatemonitor file. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the User Interface sub-component of the Oracle WebCenter Sites Support Tools software platform allows a malicious individual to gain unauthorized access to read, modify, or add data, or to cause service interruptions.

The vulnerability of the User Interface sub-component of the Oracle WebCenter Sites Support Tools software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, or add...

The vulnerability of the dict0dict.cc component of the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the dict0dict.cc component in the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to gain unauthorized access to read, modify, or add data, or to cause a service failure.

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, modify, or add data, or cause a service...

The vulnerability of the TMW IEC 61850 Software Library and the TMW IEC 60870-6 (ICCP/TASE.2) Software Library lies in their inability to access uninitialized indicators, allowing attackers to cause service failures.

The vulnerability of the TMW IEC 61850 Software Library and the TMW IEC 60870-6 ICCP/TASE.2 Software Library relates to the access to an uninitialized indicator. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability in the implementation of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to induce a service failure.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the apsteer file. Exploiting this vulnerability could allow a remote attacker to cause...

PT-2022-16196 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1010 and below ArubaOS-CX Switches versions 10.08.1050 and below ArubaOS-CX Switches versions 10.06.0190 and below Description: Multiple vulnerabilities exist in the processing of packet data by the LLDP...

DEBIAN-CVE-2022-38750

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow...

PT-2022-6915 · Snakeyaml +5 · Snakeyaml +5

Name of the Vulnerable Software and Affected Versions: snakeYAML affected versions not specified Description: The issue is related to a Denial of Service DOS attack that can occur when using snakeYAML to parse untrusted YAML files. If the parser is running on user-supplied input, an attacker may...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a configuration flaw. An attacker exploited the vulnerability to cause availability to...

The vulnerability of the Xstream Java library for converting objects to XML or JSON format allows a malicious actor to cause a service failure due to uncontrolled resource consumption.

The vulnerability of the Xstream library for converting objects into XML or JSON format involves an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

The vulnerability of the Wi-Fi router software WS7200-10, related to ICMP packet processing errors, allows a intruder to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Wi-Fi router software WS7200-10 is related to ICMP packet processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Chrome OS’ blocking screen allows a hacker to disclose protected information or cause a service failure.

The vulnerability of the Chrome OS blocking screen is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information or cause service failures...