4562 matches found
Adobe After Effects Heap Buffer Overflow DoS
The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information, as well as cause service failures for the current user...
Hyper-V Hardware Virtualization DoS
The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Magento Commerce DoS
The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
TP-240 Interface Board XML Processing Config Read Modify DoS
The vulnerability of the TP-240 interface board’s microprogramming software, used in the MiCollab and MiVoice Business Express collaboration platforms, is related to errors in processing XML messages. Exploiting this vulnerability allows an attacker to read and modify the configuration of the...
Windows DoS
The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a perpetrator to cause service failures...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
ALSA-2022:0825 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later upstream version: kernel 4.18.0. BZ2036888 Security Fixes: kernel: improper initialization of the "flags" member of the new pipebuffer CVE-2022-0847 kernel: U...
Siemens RUGGEDCOM ROS has an unspecified vulnerability (CNVD-2022-17781)
Siemens RuggedCom ROS is an operating system used in the RuggedCom family of switches from Siemens, Germany. Siemens RUGGEDCOM ROS has a security vulnerability that could be exploited by an attacker to cause data corruption and possibly hard application failures...
ASP.NET Core DoS
The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Google Chrome Microsoft Edge Unauthorized Access
The vulnerability of the HTML parser module used by Google Chrome and Microsoft Edge browsers is related to security vulnerabilities in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices
Cybersecurity researchers on Tuesday disclosed 16 new high-severity vulnerabilities in various implementations of Unified Extensible Firmware Interface UEFI firmware impacting multiple HP enterprise devices. The shortcomings, which have CVSS scores ranging from 7.5 to 8.8, have been uncovered in...
Vim Zero Pointer DoS
The vulnerability of the Vim text editor is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...
MariaDB SELECT_LEX::nest_level DoS
The vulnerability of the SELECTLEX::nestlevel component of the MariaDB database management system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...
Imagemagick Studio ImageMagick Buffer Overflow Vulnerability (CNVD-2022-20173)
Imagemagick Studio ImageMagick is a set of open source image processing software from ImageMagick Studio Imagemagick Studio, Inc. The software can read, convert, or write images in a variety of formats.ImageMagick suffers from a buffer overflow vulnerability that stems from a heap-based buffer...
Microsoft Teams DoS
The vulnerability of Microsoft Teams’ corporate platform for Android and iOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Windows Common Log File System Driver DoS
The vulnerability of the Windows Common Log File System Driver exists due to insufficient checking of input data. Exploiting this vulnerability can allow a hacker to cause system failures...
Scroll component Google Chrome Information Disclosure
The vulnerability of the Scroll component in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
Information Disclosure
github.com/aws/aws-sdk-go is vulnerable to information disclosure. An attacker who has write access to the target S3 bucket can reveal the information of the decryption failures through the endpoint. when the CBC option is chosen as a content cipher...
In-band key negotiation issue in AWS S3 Crypto SDK for golang
Summary The golang AWS S3 Crypto SDK is impacted by an issue that can result in loss of confidentiality and message forgery. The attack requires write access to the bucket in question, and that the attacker has access to an endpoint that reveals decryption failures without revealing the plaintext...
GHSA-7F33-F4F5-XWGW In-band key negotiation issue in AWS S3 Crypto SDK for golang
Summary The golang AWS S3 Crypto SDK is impacted by an issue that can result in loss of confidentiality and message forgery. The attack requires write access to the bucket in question, and that the attacker has access to an endpoint that reveals decryption failures without revealing the plaintext...