Authentication Bypass

openldap is vulnerable to authentication bypass. The vulnerability exists as a flaw was found in the way OpenLDAP handled authentication failures being passed from an OpenLDAP slave to the master. If OpenLDAP was configured with a chain overlay and it forwarded authentication failures, OpenLDAP...

The vulnerability of the exif_read_data function in the PHP programming language allows a perpetrator to gain unauthorized access to information or cause service failures.

The vulnerability of the exifreaddata function in the PHP programming language is related to the execution of operations that exceed the permissible buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information or cause service failures...

The vulnerability of the managed-keys function in the DNS BIND server allows for unlimited resource distribution, enabling attackers to cause service failures.

The vulnerability of the managed-keys function in the DNS BIND server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Google Chrome browser’s Bluetooth service, related to writing beyond the buffer size of memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s Bluetooth service is related to memory buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to copying buffers without checking the size of the input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the ANGLE component in the Google Chrome web browser allows a perpetrator to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.

The vulnerability of the ANGLE browser component in Google Chrome relates to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability could allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidenti...

Application Compatibility Update for Windows Server 2008, Windows 7, and Windows Server 2008 R2: November 2012

Application Compatibility Update for Windows Server 2008, Windows 7, and Windows Server 2008 R2: November 2012 INTRODUCTION The Windows Application Compatibility Update is a software update that improves the compatibility experience in the following Microsoft Windows operating systems: Windows...

The vulnerability of the Google Chrome browser’s Bluetooth service, related to memory usage after deallocation, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s Bluetooth service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2019-19050

A memory leak in the cryptoreportstat function in crypto/cryptouserstat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering cryptoreportstatalg failures, aka CID-c03b04dcdba1...

SUSE-SU-2020:0957-1 Security update for mgetty

This update for mgetty fixes the following issues: - CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan bsc1142770. - Fixed a permission issue which have resulted in build failures bsc1168170...

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program allows a hacker to disclose protected information or cause system failures.

The vulnerability of the libaspell.a component in the GNU Aspell spell-checking program is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information or cause system failures...

The vulnerability of Huawei’s microprogrammed router software, related to improper cleaning or release of resources, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the create_multipart_context() function in the libapreq2 library, which allows a hacker to cause a service failure

The vulnerability of the createmultipartcontext function in the libapreq2 library is related to the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by using a specially crafted HTTP request...

The vulnerability of the Cisco Discovery protocol allows attackers to trigger a maintenance failure in operating systems such as Cisco NX-OS and Cisco FXOS.

The vulnerability of the Cisco Discovery protocol’s implementation in Cisco NX-OSS and Cisco FXOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Product update: Virtuozzo 7.0 Update 13 (7.0.13-298)

The Update 13 for Virtuozzo 7.0 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1062.12.1.vz7.131.10. Vulnerability id: PSBM-95072 'pstorage-target' files are left over after successful migrations of VMs on Virtuozzo Storage from...

The vulnerability of the SSH daemon on the RouterOS operating system of MikroTik allows a hacker to cause a service failure.

The vulnerability of the SSH daemon on the RouterOS operating system of MikroTik routers is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to cause service failures by using system calls like connect and write...

The vulnerability of Intel Graphics Drivers exists due to insufficient validation of input data. This allows attackers to disclose protected information and cause service failures.

The vulnerability of Intel Graphics Drivers exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to disclose protected information and cause service failures...

The vulnerability of the igdkmd64.sys driver for Intel Graphics Drivers, related to an error in path traversal, allows attackers to escalate their privileges and cause service failures.

The vulnerability of the igdkmd64.sys driver for Intel Graphics Drivers is related to a path traversal error. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...

The vulnerability of Intel Graphics Driver drivers arises from operations that go beyond buffer boundaries in memory, allowing attackers to escalate their privileges or cause system failures.

The vulnerability of Intel Graphics Drivers drivers arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges or cause service failures...

The vulnerability of the Kerberos protocol in operating systems such as Red Hat Enterprise Linux and Fedora allows a perpetrator to cause a service failure.

The vulnerability of the Kerberos protocol exists in Red Hat Enterprise Linux and Fedora operating systems due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...