4063 matches found
Race condition
Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service DoS...
Race condition
There is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier than Leland-AL00A 9.1.0.111C00E111R2P10T8. Remote attackers could trick the user into opening a malformed RTSP media stream to exploit this vulnerability. Successful exploit could cause the affected...
CVE-2019-5284
There is a DoS vulnerability in RTSP module of Leland-AL00A Huawei smart phones versions earlier than Leland-AL00A 9.1.0.111C00E111R2P10T8. Remote attackers could trick the user into opening a malformed RTSP media stream to exploit this vulnerability. Successful exploit could cause the affected...
CVE-2019-5284
Huawei Leland-AL00A smartphones prior to version 9.1.0.111 (C00E111R2P10T8) are affected by a DoS in the RTSP module. Exploitation involves tricking a user into opening a malformed RTSP media stream, which could cause the device to become abnormal and stateful‑DoS. Several sources (NVD/NVDCVE, CN...
CVE-2019-5285
CVE-2019-5285 affects Huawei S Series switches. A DoS exists where an unauthenticated remote attacker can send crafted packets, due to insufficient verification, potentially causing device reboot and denial of service. The issue is documented in Huawei’s advisory (HWPSIRT-2019-03109/SA-20190522-0...
OPENSUSE-SU-2019:1506-1 Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic CPU...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. Remote authenticated attacker could exploit the vulnerable Privileges component to cause a hang or frequently repeatable crash...
Security Advisory - DoS Vulnerability in Huawei S Series Switch Products
Some Huawei S series switches have a DoS vulnerability. An unauthenticated remote attacker can send crafted packets to the affected device to exploit this vulnerability. Due to insufficient verification of the packets, successful exploitation may cause the device reboot and denial of service DoS...
KLA11568 DoS vulnerability in Wireshark
Unspecified vulnerability was found in Wireshark. Malicious users can exploit this vulnerability via injecting a malformed packet to cause denial of service. Original advisories wnpa-sec-2019-19 Related products Wireshark CVE list CVE-2019-12295 warning Solution Update to latest version Get...
Denial Of Service (DoS)
IBM Java SE version 8 is vulnerable to denial of service DoS fixed by slow conversion of BigDecimal to long...
Denial Of Service (DoS)
ghostscript PDF14 compositor is vulnerable to denial of serviceDoS attacks. This is because it does not properly handle the copying of a device. An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or possibly execute arbitrary code in the ghostscript...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote authenticated attacker could exploit a flaw in the Optimizer component to cause denial of service conditions...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote authenticated user could exploit a flaw in the Client programs component which leads to cause a hang or frequently repeatable crash complete DoS...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote authenticated user could exploit a flaw in the Security Privileges component which leads to cause a hang or frequently repeatable crashcomplete DoS...
Denial Of Service (DoS)
Oracle MySQL is vulnerable to denial of service attacks. A remote authenticated user with high privileges could compromise MySQL Server via multiple protocols resulting in a system crash. Affected is the component DML...
Security Update for Microsoft ASP.NET Core (DoS) (May 2019)
The Microsoft ASP.NET Core installation on the remote host is version 2.1.x 2.1.11, 2.2.x 2.2.5. It is, therefore, affected by a denial of service DoS vulnerability when ASP.NET Core improperly handles web requests. An unauthenticated, remote attacker could exploit this issue, via sending a...
SEL AcSELerator Architect 2.2.24 - CPU Exhaustion Denial of Service
!/usr/bin/env python coding: utf8 SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service Vendor: Schweitzer Engineering Laboratories, Inc. Product web page: https://www.selinc.com Affected version: 2.2.24.0 ICD package version: 2.38.0 Summary: Substation communications networks...
DEBIAN-CVE-2019-12111
A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c...
SUSE-SU-2019:1234-1 Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic CPU...
rubygem-actionpack: denial of service vulnerability in Action View
There is a possible denial of service vulnerability in Action View Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive...