3907 matches found
The vulnerability of Intel Software Guard Extensions SDK, related to reclaimed memory, allows a hacker to disclose protected information or cause service failures.
The vulnerability of Intel Software Guard Extensions SDK relates to the reallocation of memory. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...
Azure DevOps Server and Team Foundation Server Cross-Site Scripting Vulnerability
Azure DevOps Server, formerly known as Team Foundation Server TFS, is a locally hosted set of collaborative software development tools.Azure DevOps Server integrates with existing IDEs or editors to enable cross-functional teams to effectively handle projects of all sizes.Team Foundation Server i...
The vulnerability of the processmetadata function in the GNU Libextractor library, related to reading beyond the memory boundaries, allows attackers to cause service failures or disclose protected information.
The vulnerability of the processmetadata function in the GNU Libextractor library is related to the issue of reading beyond the memory boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...
The vulnerability of the `readSocket` function in the Live555 Media Server library, part of the `liblivemedia` package, allows a attacker to cause a service failure.
The vulnerability of the readSocket function in the GroupsockHelper.cpp library of the Live555 Media Server package from the liblivemedia library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the libsolv library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.
The vulnerability of the testcaseread function in the libsolv library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the Active Management Technology remote access implementation lies in insufficient validation of input data, allowing a perpetrator to trigger a service failure.
The vulnerability of the Active Management Technology remote access implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the SAP Fiori Client’s mobile execution environment, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of the SAP Fiori Client mobile environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending empty push notifications remotely...
The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services allows a perpetrator to cause a service failure.
The vulnerability of the HECI subsystem of the microprogramming software for Intel Server Platform Services SPS is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures...
openSUSE Security Update : mailman (openSUSE-2019-495)
This update for mailman to version 2.1.27 fixes the following issues : This security issue was fixed : - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed : - The hash generated when...
The vulnerability of the Nginx Unit application server arises from overflow in the dynamic memory buffer, allowing attackers to cause service failures.
The vulnerability of the Nginx Unit application server arises from overflowing buffers in dynamic memory. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially crafted request...
The vulnerability of the Cisco Fabric Services component for NX-OS operating systems on Cisco devices allows a hacker to trigger a service failure.
The vulnerability of the Cisco Fabric Services component for NX-OS operating systems on Cisco devices exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerabilities of the microprogrammed software of Moxa EDS-405A, Moxa EDS-408A, and Moxa EDS-510A allow a hacker to trigger a service failure.
The vulnerability of the microprogramming software of Moxa EDS-405A, Moxa EDS-408A, and Moxa EDS-510A devices is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created...
The vulnerability of the snprintf function in the file system GlusterFS allows a attacker to cause a service failure.
The vulnerability of the snprintf function in the GlusterFS file system is related to the use of an uncontrolled format string. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the TIFFWriteDirectorySec() function in the LibTIFF library, which allows a hacker to cause a service failure.
The vulnerability of the TIFFWriteDirectorySec function tifdirwrite.c in the LibTIFF library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted file...
CVE-2017-2659
It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an invalid username is given, the GSSAPI authentication failure was incorrectly counted towards the maximum allowed number of password attempts...
The vulnerability of the multiply_ms function in the LibTIFF library, related to integer overflow, allows an attacker to access confidential information or cause service failures.
The vulnerability of the multiplyms function in the LibTIFF library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to access confidential information or cause service failures...
The vulnerability in the iOS client application of the Cisco Webex Teams software allows a perpetrator to compromise the integrity of protected information or cause service failures.
The vulnerability in the iOS client application of the Cisco Webex Teams collaboration software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information or cause service failures...
The vulnerability of the vout function in the software tool for interacting with curl servers allows a hacker to disclose sensitive information and cause service failures.
The vulnerability of the vout function in the toolmsgstr.c file of the software for interacting with curl servers relates to reading beyond the buffer boundaries when the buffer is overflowing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause...
SSH Rate Limited Device
The remote host is a device that may rate limit connections, potentially causing intermittent authentication failures in other plugins. Local checks will be enabled in this plugin where possible. TRUSTED...
The vulnerability of the Simatic programmable logic controller’s software, related to resource exhaustion, allows a intruder to restrict access to network connections or cause service failures.
The vulnerability of the Simatic programmable logic controller’s software is related to the exhaustion of resources during the processing of a large number of specially prepared packages. Exploiting this vulnerability can allow an intruder to restrict access to network connections or cause servic...