Denial Of Service (DoS)

OpenStack Compute nova is vulnerable to denial of service DoS attack. It is possible because it does not restrict qemu-ing calls to consume as much as 4 GB of RAM on the compute host by uploading a malicious image, leading to out-of-memory errors and negatively affect other running tenant instanc...

Denial Of Service (DoS)

bind-dyndb-ldap is vulnerable to denial of service DoS attacks. The vulnerability exists as the handleconnectionerror function in ldaphelper.c does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service through a non-alphabet character in the base DN in ...

The vulnerability of the Microsoft Windows Codecs library in the Windows operating system allows a hacker to gain access to confidential information.

The vulnerability of the Microsoft Windows Codecs library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to access confidential information through a specially crafted image file...

CVE-2018-1000872

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors similar issue to CVE-2015-5262 vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear...

Internet Bug Bounty: Use after free and out of bounds read in xmlrpc_decode()

Malformed input can lead to use after free and out of bounds memory errors. This has been fixed with the latest updates of PHP 7.1.26/7.2.14/7.3.1. Note: I reported those as separate bugs to PHP, but they had the same underlying bug and were fixed by the same commit. The release notes only mentio...

The vulnerability of the Device Guard component of the Windows operating system allows a hacker to inject arbitrary code into a Windows PowerShell session.

The vulnerability of the Device Guard component in the Windows operating system is related to security configuration errors. Exploiting this vulnerability could allow a local attacker to inject arbitrary code into the Windows PowerShell session...

The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system allows a hacker to redirect traffic to a malicious destination.

The vulnerability of the DNS Global Blocklist mechanism in the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to redirect traffic to a malicious destination remotely...

The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, a software for viewing electronic spreadsheets; the Microsoft Office and Office 365 products; the Microsoft Office Compatibility Pack; the Microsoft PowerPoint Viewer, a software for viewing presentations; the Microsoft Office Word Viewer, a software for reading documents; and the Microsoft Windows operating system. This vulnerability allows attackers to disclose protected information.

The vulnerability of the Microsoft Graphics component in the Microsoft Excel Viewer, Microsoft Office programs and Office 365, the Microsoft Office Compatibility Pack, the Microsoft PowerPoint Viewer, the Microsoft Office Word Viewer, and the Microsoft Windows operating system is related to objec...

The vulnerability of the Filter Manager component of the Microsoft Windows operating system, allowing a hacker to execute arbitrary code.

The vulnerability of the Filter Manager component of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code and gain control over the vulnerable system by deleting a specific file...

Vulnerability of the .NET Core runtime and PowerShell Core automation framework, related to authentication process errors, allowing attackers to disclose sensitive information

The vulnerability of the .NET Core runtime and the PowerShell Core automation framework is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software, related to authentication process errors, allows attackers to escalate their privileges.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using specially crafted HTTP requests...

The vulnerability of the Windows operating system, related to access privilege escalation errors, allows attackers to execute processes with elevated privileges.

The vulnerability of the Windows operating system is related to access control errors. Exploiting this vulnerability allows an attacker to execute processes with elevated privileges through a specially created application...

PHP 5.6.x < 5.6.13 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.13. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free memory errors exist related to the unserialize function, which a remote attacker can exploit to execute arbitra...

Webgalamb Information Disclosure / XSS / CSRF / SQL Injection

Summary ------- Vendor: E.N.S. Zrt www.ens.hu Product: Webgalamb www.webgalamb.hu, www.facebook.com/webgalamb Webgalamb is a commercial email marketing software for managing subscription lists and sending out bulk emails. It is not SaaS but a PHP based web application that is typically hosted nex...

Fedora 29 : phpMyAdmin (2018-088802878a)

Upstream announcement : The phpMyAdmin team is pleased to announce the release of phpMyAdmin version 4.8.4. Among other bug fixes, this contains several important security fixes. The security fixes involve : - Local file inclusion https://www.phpmyadmin.net/security/PMASA-2018-6/, - XSRF/CSRF...

Fedora 28 : xen (2018-a7ac26523d)

x86: mishandling of debug exceptions XSA-260, CVE-2018-8897 x86 vHPET interrupt injection errors XSA-261 1576089 qemu may drive Xen into unbounded loop XSA-262 ---- update to xen-4.10.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora updat...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service v...

The vulnerability of the VBScript mechanism in Internet Explorer arises due to errors in object handling in memory, allowing attackers to execute arbitrary code in the context of the current user.

The vulnerability of the VBScript mechanism in Internet Explorer exists due to object handling errors in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially created web page...

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...