FreeRDP Buffer Overflow DoS

The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data from the buffer beyond its allowable limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

Unbound DNS Server Use-After-Free

The vulnerability of the rdatacopy function in the Unbound DNS server relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Microsoft Windows Socket DoS

The vulnerability of the socket implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending specially crafted input data to the application...

Windows Hyper-V DoS

The vulnerability of the Windows Hyper-V component of the operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by transmitting specially crafted input data to the application...

Unbound DNS Server Buffer Overflow DoS

The vulnerability of the dnamepktcopy function in the Unbound DNS server is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Google Android Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a failure to properly check for boundaries in TBD of TBD, which could allow for out-of-bounds writes. An attacker with system execution...

Wireshark Modbus DoS

The vulnerability of the Modbus analyzer component in Wireshark relates to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by injecting specially created packets...

Unbound sldns_str2wire_dname_buf_origin Buffer Overflow DoS

The vulnerability of the sldnsstr2wirednamebuforigin function in the DNS server’s Unbound component is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

OWASP Top 10 Deep Dive: Identification and Authentication Failures

In the 2021 edition of the OWASP top 10 list, Broken Authentication was changed to Identification and Authentication Failures. This term bundles in a number of existing items like cryptography failures, session fixation, default login credentials, and brute-forcing access. Additionally, this...

Adobe After Effects Null Pointer DoS

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the handling of a special pointer. Exploiting this vulnerability can allow an attacker to cause service failures...

Data Plane Statistics PAN-OS DoS

The vulnerability of the Data Plane Statistics module in the PAN-OS operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures by routing traffic through the firewall...

DEBIAN-CVE-2021-28709

issues with partially successful P2M updates on x86 This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have...

Security update for hylafax+ (moderate)

openSUSE Security Update: Security update for hylafax+ Announcement ID: openSUSE-SU-2021:1494-1 Rating: moderate References: 1191571 Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: hylafax+ was updated to version 7.0.4:...

CVE-2021-26336

CVE-2021-26336 concerns AMD System Management Unit (SMU) with insufficient bounds checking that can cause invalid memory accesses/updates, leading to an SMU hang and the system may fail to service further requests from other components. Multiple sources confirm the issue under the SMU and referen...

MedData Hbys SQL Injection Vulnerability

A SQL injection vulnerability exists in MedData Hbys, a healthcare software from MedData, Inc. The vulnerability stems from the product's failure to effectively filter special characters in input data. An unauthenticated attacker could obtain sensitive information through this vulnerability...

Adobe XMP-Toolkit-SDK Buffer Overflow DoS

The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

Cisco IOS LLDP DoS

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...

Microsoft Exchange Server DoS

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Windows TCP/IP DoS

The vulnerability of the TCP/IP protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

VMware Workspace ONE UEM REST API DoS

The vulnerability of the REST API interface of the Unified Management Console for VMware Workspace ONE UEM involves improper rate limiting at the endpoint level. Exploiting this vulnerability allows an attacker to cause service failures by sending a large number of requests...