8274 matches found
The vulnerability of the shadow account management tool is related to insecure management of privileges, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the shadow account management tool is related to the incorrect specification of pts/o and pts/1 as physical terminals in the /etc/securetty file. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...
NICKEL targeting government organizations across Latin America and Europe
The Microsoft Threat Intelligence Center MSTIC has observed NICKEL, a China-based threat actor, targeting governments, diplomatic entities, and non-governmental organizations NGOs across Central and South America, the Caribbean, Europe, and North America. MSTIC has been tracking NICKEL since 2016...
Pandemic-Influenced Car Shopping: Just Use the Manufacturer API
The pandemic has caused huge disruptions in the supply chain for a wide variety of industries. One of the major areas feeling the global issues is the car industry. Fortunately, I found a way to exploit a manufacturer API to minimize my frustration. First, some background: Many outlets have widel...
CVE-2021-40334
Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...
Improper access control
Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...
CVE-2021-40334 SSH activation problem in the proprietary management protocol (port TCP 5558)
Missing Handler vulnerability in the proprietary management protocol port TCP 5558 of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x...
The vulnerability of Cisco’s software algorithm, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of Cisco software algorithms is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the mail client in operating systems such as iOS, iPadOS, and watchOS allows a hacker to trigger a service failure.
The vulnerability of the email client in operating systems such as iOS, iPadOS, and watchOS is related to the operation of writing data beyond the buffer in memory when processing malicious email messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the ngx_memcpy function in the OpenResty web server, related to buffer overflows, allows attackers to cause a service failure.
The vulnerability of the memcpy-param-overlap function in the OpenResty web server is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...
The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3s_hv_rmhandlers.S of Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3shvrmhandlers.S of Linux operating systems is related to the lack of checks for returned data during the processing of SRR1 values. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2021-43360
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...
PT-2021-8112 · Unknown +5 · Virglrenderer +5
Name of the Vulnerable Software and Affected Versions: virglrenderer affected versions not specified Description: The issue is related to an out-of-bounds write in the VirGL virtual OpenGL renderer. A malicious guest can create a specially crafted virgil resource and issue a VIRTGPU EXECBUFFER...
The vulnerability in the implementation of the tipc_crypto_key_rcv() function for the TIPC protocol, which is used for intra-cluster communication in Linux operating systems, allows a attacker to cause a service failure or gain increased privileges.
The vulnerability of the implementation of the tipccryptokeyrcv function in the Linux operating system’s Transparent Inter-Process Communication TIPC kernel relates to insufficient input validation when processing MSGCRYPTO messages. Exploiting this vulnerability can allow an attacker to cause...
The vulnerability of Windows operating system script handlers allows a perpetrator to execute arbitrary code or cause service failures.
The vulnerability of Windows operating system script handlers is related to the operation of writing data beyond the buffer boundaries into memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...
Huawei HarmonyOS 安全漏洞
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect privileges. An attacker can exploit this vulnerability to affect service availability...
The vulnerability of the check_password function in the web server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the checkpassword function in the web server of the programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code using a specially crafted reque...
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...
The vulnerability of the web-server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the web-server-based programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...
The vulnerability of JScript and VBScript script handlers in Internet Explorer, related to the execution of operations beyond the buffer boundaries, allows attackers to execute arbitrary code or cause service interruptions.
The vulnerability of JScript and VBScript script handlers in Internet Explorer is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...
Philips Patient Information Center iX 输入验证错误漏洞
Philips Patient Information Center iX Philips Patient Information Center PIC iX, a Philips company in Europe, is at the heart of our patient monitoring system, which facilitates understanding of the patient's condition and helps caregivers to identify potential deterioration at an early stage, as...