792 matches found
CVE-2021-32999
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01...
Input validation
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01...
CVE-2021-32999 AVEVA SuiteLink Server Improper Handling of Exceptional Conditions
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01...
CVE-2021-32999
CVE-2021-32999 describes an improper handling of exceptional conditions in the AVEVA SuiteLink Server when processing command 0x01. The NVD entry assigns a CVSSv3 base score of 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileges/UI, and a HIGH availability impact. Connecte...
CVE-2021-32999: Improper Handling of Exceptional Conditions
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01...
The vulnerability of the OTRS ticket request system, related to deficiencies in processing exceptional statuses, allows a violator to trigger a service denial.
The vulnerability of the OTRS ticket request system is related to deficiencies in handling exceptional situations. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending a message containing a specially created URL address...
The vulnerability of the SSL-Proxy function of the anonymous web browser Tor allows a perpetrator to trigger a service failure.
The vulnerability of the SSL-Proxy function of the anonymous web browser Tor is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the WAF engine for Apache ModSecurity, related to deficiencies in handling exceptional states, allows a attacker to trigger a service failure.
The vulnerability of the WAF engine for Apache ModSecurity is related to incorrect data processing in the form of key-value pairs. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to incorrect handling of exceptional states, allowing a violator to execute arbitrary code.
The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to incorrect processing of exceptional states during syntax analysis of DWG files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially created malicious DWG file...
The vulnerability of TCP/IP NicheLite and InterNiche, related to improper handling of exceptional states, allows attackers to trigger a service failure.
The vulnerability of TCP/IP NicheLite and InterNiche relates to improper handling of exceptional states during HTTP requests processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2021-3053 PAN-OS: Exceptional Condition Denial-of-Service (DoS)
An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enables an unauthenticated network-based attacker to send specifically crafted traffic through the firewall that causes the service to crash. Repeated attempts to send this request...
PAN-OS: Exceptional Condition Denial-of-Service (DoS)
An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enables an unauthenticated network-based attacker to send specifically crafted traffic through the firewall that causes the service to crash. Repeated attempts to send this request...
CVE-2021-32999
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01...
ICSA-21-231-01_AVEVA SuiteLink Server
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: AVEVA Software, LLC Equipment: SuiteLink Server Vulnerabilities: Heap-based Buffer Overflow, Null Pointer Dereference, Improper Handling of Exceptional Conditions 2. RISK EVALUATION Successful...
CVE-2021-39242: Improper Handling of Exceptional Conditions
An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It can lead to a situation with an attacker-controlled HTTP Host header, because a mismatch between Host and authority is mishandled...
CVE-2021-21592
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure...
Rockwellautomation Factorytalk Improper Handling of Exceptional Conditions
An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions ...
Rockwellautomation Factorytalk Improper Handling of Exceptional Conditions
An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are...
