The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the memory boundaries. This allows attackers to gain unauthorized access to protected information and also cause system failures.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information, as well as cause service failures for the current user...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the TP-240 interface board’s microprogramming software in MiCollab and MiVoice Business Express systems, related to errors in processing XML messages, allows attackers to read and modify the configuration of the vulnerable device or trigger a service failure.

The vulnerability of the TP-240 interface board’s microprogramming software, used in the MiCollab and MiVoice Business Express collaboration platforms, is related to errors in processing XML messages. Exploiting this vulnerability allows an attacker to read and modify the configuration of the...

The vulnerability of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2022:0825 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel 4.18.0. BZ2036888 Security Fixes: kernel: improper initialization of the "flags" member of the new pipebuffer CVE-2022-0847 kernel: U...

Siemens RUGGEDCOM ROS has an unspecified vulnerability (CNVD-2022-17781)

Siemens RuggedCom ROS is an operating system used in the RuggedCom family of switches from Siemens, Germany. Siemens RUGGEDCOM ROS has a security vulnerability that could be exploited by an attacker to cause data corruption and possibly hard application failures...

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment lies in insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the HTML code transformation module in Google Chrome and Microsoft Edge browsers allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the HTML parser module used by Google Chrome and Microsoft Edge browsers is related to security vulnerabilities in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices

Cybersecurity researchers on Tuesday disclosed 16 new high-severity vulnerabilities in various implementations of Unified Extensible Firmware Interface UEFI firmware impacting multiple HP enterprise devices. The shortcomings, which have CVSS scores ranging from 7.5 to 8.8, have been uncovered in...

The vulnerability of the SELECT_LEX::nest_level component of the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the SELECTLEX::nestlevel component of the MariaDB database management system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Vim text editor, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the Vim text editor is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

Imagemagick Studio ImageMagick Buffer Overflow Vulnerability (CNVD-2022-20173)

Imagemagick Studio ImageMagick is a set of open source image processing software from ImageMagick Studio Imagemagick Studio, Inc. The software can read, convert, or write images in a variety of formats.ImageMagick suffers from a buffer overflow vulnerability that stems from a heap-based buffer...

The vulnerability of Microsoft Teams’ corporate platform for Android and iOS operating systems lies in the insufficient validation of input data, which allows a hacker to trigger a service failure.

The vulnerability of Microsoft Teams’ corporate platform for Android and iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the Windows Common Log File System Driver exists due to insufficient checking of input data. Exploiting this vulnerability can allow a hacker to cause system failures...

The vulnerability of the Scroll component in Google Chrome allows a hacker to gain access to confidential information or cause a service failure.

The vulnerability of the Scroll component in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

Information Disclosure

github.com/aws/aws-sdk-go is vulnerable to information disclosure. An attacker who has write access to the target S3 bucket can reveal the information of the decryption failures through the endpoint. when the CBC option is chosen as a content cipher...

GHSA-7F33-F4F5-XWGW In-band key negotiation issue in AWS S3 Crypto SDK for golang

Summary The golang AWS S3 Crypto SDK is impacted by an issue that can result in loss of confidentiality and message forgery. The attack requires write access to the bucket in question, and that the attacker has access to an endpoint that reveals decryption failures without revealing the plaintext...

In-band key negotiation issue in AWS S3 Crypto SDK for golang

Summary The golang AWS S3 Crypto SDK is impacted by an issue that can result in loss of confidentiality and message forgery. The attack requires write access to the bucket in question, and that the attacker has access to an endpoint that reveals decryption failures without revealing the plaintext...