4568 matches found
OpenOffice WW8ListManager Buffer Overflow DoS
The vulnerability of the WW8ListManager function in the OpenOffice office package is related to the improper handling of an unspecified number of list levels in the list styles defined by the user. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data,...
TCL-script interpreter DoS
The vulnerability of the TCL-script interpreter for Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
OpenOffice Impress Vulnerable
The vulnerability of the Impress module in the OpenOffice office package is related to incorrect handling of integer values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
OpenOffice Path Traversal
The vulnerability of the OpenOffice office suite is related to a recompilation error through “.. two dots” in files where the XSLT JAR filter is active. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
OpenOffice ww8par2.cxx Filter Data Compromise
The vulnerability of the ww8par2.cxx filter in the OpenOffice office suite is related to a property error in the sprmTDefTable table within the document. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
389 Directory Server Buffer Overflow DoS
The vulnerability of the enterprise-level catalog service 389 Directory Server lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
A Report Blames ‘CIA Failures’ for the Agency's Worst Hack
A series of WikiLeaks disclosures that exposed a trove of the intelligence organization's secrets could have been avoided, a task force found...
OpenOffice Buffer Overflow DoS
The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...
Sblim-sfcb SSL Certificate Installation Data Compromise
The vulnerability in the program for installing SSL certificates in the standardized Linux Sblim-sfcb tool relates to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity,...
OpenOffice Integer Overflow
The vulnerability of the OpenOffice office suite is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures due to the records created by the attack...
Libyang Buffer Overflow DoS
The vulnerability of the syntax analyzer and the YANG data modeling language toolset lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...
When Security Takes a Backseat to Productivity
"We must care as much about securing our systems as we care about running them if we are to make the necessary revolutionary change." -CIA's Wikileaks Task Force. So ends a key section of a report the U.S. Central Intelligence Agency produced in the wake of a mammoth data breach in 2016 that led ...
Connected User Experience Telemetry Service Windows DoS
The vulnerability of the Connected User Experience and Telemetry Service services in Microsoft Windows operating systems is related to insufficient verification of permission assignment for critical resources. Exploiting this vulnerability can allow attackers to cause service failures...
Cisco IOS Packet Processor DoS
The vulnerability of the Simple Network Management Protocol packet processor in Cisco IOS and IOS XE operating systems relates to unauthorized access to the indexed resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Schneider Electric Easergy T300 Uncontrolled Resource Consumption
The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 for transformer substations automation involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system due ...
CVE-2020-13805
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...
Design/Logic Flaw
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...
CVE-2020-13805
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...
CVE-2020-13805
The CVE-2020-13805 entry concerns Foxit Reader and PhantomPDF prior to 9.7.2 where the CAS login service does not limit login failures, enabling brute-force attack attempts. Concrete details across connected sources confirm the affected products (Foxit Reader/PhantomPDF) and the root cause (unlim...
PT-2020-13689
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.7.2 PhantomPDF versions prior to 9.7.2 Description The issue is related to brute-force attack mishandling due to the CAS service lacking a limit on login failures. Recommendations For Foxit Reader versions prio...