3925 matches found
MediaWiki 跨站脚本漏洞
MediaWiki is a free and free-to-use web-based wiki engine from the US-based MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki version 1.1 contains a cross-site scripting vulnerability, which stems from the ScratchLogin...
The vulnerability of the API interface of the Cisco Meeting Server platform allows a hacker to trigger a service failure.
The vulnerability of the Cisco Meeting Server’s API interface relates to insufficient validation of input data during request processing. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...
PT-2022-34884 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.7 Description: The issue is related to a use-after-free UAF problem in the nfqnl nf hook drop function when ops init fails. The actual impact and attack plausibility have not yet been proven. Recommendation...
GHSA-P72G-CGH9-GHJG Failing DTLS handshakes may cause throttling to block processing of records
Impact Failing handshakes didn't cleanup counters for throttling. In consequence the threshold may get reached and will not be released again. The results in permanently dropping records. The issues was reported for certificate based handshakes, but it can't be excluded, that this happens also fo...
Low: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
The vulnerability of Siemens’ microprogrammed software for routers, access points, and routers arises from insufficient validation of input data. This allows attackers to trigger service failures.
The vulnerability of Siemens’ microprogrammed routing devices, access points, and routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
undertow: Double AJP response for 400 from EAP 7 results in CPING failures
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second...
The vulnerability of Moxa EDR-G903, EDR-G902, and EDR-810 microprogrammed router software lies in the lack of memory release, which allows attackers to trigger a service failure.
The vulnerability of Moxa EDR-G903, EDR-G902, and EDR-810 microprogrammed router software lies in the lack of memory release when processing a large number of packets. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of Windows Event Logging, a service in the Windows operating system, allows a perpetrator to trigger a service failure.
The vulnerability of Windows Event Logging service is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Decoder.Skip component in the Go programming language is related to an uncontrolled recursion, which allows a hacker to trigger a service failure.
The vulnerability of the Decoder.Skip component in the Go programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the JavaScript library’s template function for working with arrays like Underscore allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the JavaScript library’s template function for working with arrays like Underscore is related to incorrect code generation practices. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the InnoDB component of the MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the InnoDB component in the MySQL Database Management System exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Java Protocol Buffers protobuf-java environment library, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Java Protocol Buffers protobuf-java environment library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge browsers allows a malicious actor to trigger a service failure.
The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
October 17, 2022—KB5020436 (OS Build 20348.1131) Out-of-band
None None...
October 17, 2022—KB5020438 (OS Build 17763.3534) Out-of-band
None None...
October 17, 2022 Non-security update (KB5020446) Out-of-band
None None...
The vulnerability of VMware Cloud Foundation and VMware ESXi hypervisor lies in improper resource cleaning or release mechanisms, allowing attackers to trigger service failures.
The vulnerability of the VMware Cloud Foundation virtualization platform and the VMware ESXi hypervisor is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED
None None...
Use safeTransferFrom instead of transferFrom()
Lines of code Vulnerability details Impact Although ERC20 standard suggests that a transfer should return true on success, there are tokens that doesn't comply with this. Therefore, the transferFrom call might cause silent failures and will affect the token accounting in this contract. Proof of...