The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service failures...

The vulnerability of the touch_pmd() function in Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the touchpmd function in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to cause a service failure.

The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the color_apply_icc_profile function (bin/common/color.c) in the OpenJPEG encoding and decoding library allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the colorapplyiccprofile function in the OpenJPEG encoding and decoding library is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

The vulnerability of Linux operating system kernels, related to pointer arithmetic errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Linux operating system kernels is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack allows a attacker to cause a service failure.

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to deficiencies in access control, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the Samba networking software server’s LDAP server lies in a resource management mechanism error, which allows attackers to cause service failures.

The vulnerability of the Samba networking software’s LDAP server is related to a resource management mechanism error. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform is related to the lack of a mechanism for managing code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

The vulnerability of the kernel driver of the Intel PROSet/Wireless WiFi utility allows a hacker to cause a service failure.

The vulnerability of the kernel driver of the Intel PROSet/Wireless WiFi utility lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit

This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service RRAS to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windo...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2021-374)

This update for java-180-openjdk fixes the following issues : - Update to version jdk8u282 icedtea 3.18.0 - January 2021 CPU bsc1181239 - Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 - Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

The vulnerability of the libnvomx driver library from NVIDIA Tegra OpenMax allows attackers to induce service failures or gain increased privileges.

The vulnerability of the NVIDIA Tegra OpenMax driver library libnvomx relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in the NX-OS operating system in ACI Mode on Nexus 9000 Series routers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the CFTLDManager::HandleRequest function in the RnaDaSvr.dll software of the FactoryTalk Linx automation system allows a intruder to trigger a service failure.

The vulnerability of the CFTLDManager::HandleRequest function in the FactoryTalk Linx automation system software is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla for Windows operating systems allows a malicious individual to cause system failures or gain increased privileges.

The vulnerability of the NVIDIA Control Panel driver for graphics processors such as NVIDIA GeForce, Quadro, NVS, and Tesla on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause system failures or increase their...

An issue was discovered in the Linux kernel 3.2 through 5.10.16 as used by Xen. Grant mapping operations often occur in batch hypercalls where a number of operations are done in a single hypercall the success or failure of each one is reported to the backend driver and the backend driver then loops over the results performing follow-up actions based on the success or failure of each operation. Unfortunately when running in PV mode the Linux backend drivers mishandle this: Some errors are ignored effectively implying their success from the success of related batch elements. In other cases errors resulting from one batch element lead to further batch elements not being inspected and hence successful ones to not be possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and drivers/xen/gntdev.c.

...

Apache XmlGraphics Commons Server-Side Request Forgery Vulnerability

Apache XmlGraphics Commons is Apach open source a system library . Provides several reusable libraries. Apache XmlGraphics Commons 2.4 suffers from a server-side request forgery vulnerability that stems from the failure of XMPParser to properly validate inputs, which can be exploited by an attack...

The vulnerability of the Routing Protocol Daemon (RPD) service in the Junos operating system allows a attacker to cause a service failure.

The vulnerability of the Routing Protocol Daemon RPD in the Junos operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Intel Ethernet I210 controller’s microprogramming software, related to incorrect resource initialization, allows a hacker to trigger a service failure.

The vulnerability of Intel Ethernet I210 controller’s microprogramming software is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...