Xen Denial of Service Vulnerability (XSA-301)

According to its self-reported version number, the Xen Hypervisor installed on the remote host is affected by a denial of service vulnerability due to improper validation of input data. An authenticated, remote attack can exploit this, via a specially crafted hypercall followed by an access to an...

The vulnerability of the Intel Graphics Driver’s API driver component allows a hacker to trigger a service failure.

The vulnerability of the Intel Graphics Driver’s API driver component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from insufficient validation of input data. This allows a perpetrator to trigger a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Cisco Enterprise NFV Infrastructure Software (NFVIS) arises from insufficient validation of input data, allowing attackers to disclose sensitive information that should be protected.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS exists due to insufficient testing of input data. Exploiting this vulnerability could allow a attacker to disclose protected information...

The vulnerability of the goldendict software package for the Astra Linux operating system arises from a validation error in the input data received from web servers. This error allows attackers to trigger a service failure.

The vulnerability of the goldendict software package for the Astra Linux operating system is related to a validation error in the input data received from web servers. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Microsoft DirectWrite / AFDKO - Stack-Based Buffer Overflow in do_set_weight_vector_cube for Large nAxes

-----===== Background =====----- AFDKO Adobe Font Development Kit for OpenType is a set of tools for examining, modifying and building fonts. The core part of this toolset is a font handling library written in C, which provides interfaces for reading and writing Type 1, OpenType, TrueType to some...

The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to trigger a service failure.

The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from the web server. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of SINAMICS PERFECT HARMONY GH180 software drivers, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker with access to the device over the network to cause service failures...

The vulnerability of Intel Broadwell processors stems from insufficient validation of input data, allowing attackers to exploit their privileges, cause system failures, or compromise the confidentiality of protected information.

The vulnerability of Intel Broadwell processors exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or compromise the confidentiality of protected information...

CVE-2018-18558

An issue was discovered in Espressif ESP-IDF 2.x and 3.x before 3.0.6 and 3.1.x before 3.1.1. Insufficient validation of input data in the 2nd stage bootloader allows a physically proximate attacker to bypass secure boot checks and execute arbitrary code, by crafting an application binary that...

The vulnerability of the Poppler library for displaying PDF files, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Poppler library for displaying PDF files is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Intel Graphics Driver lies in its lack of proper input data validation, allowing attackers to gain access to and read arbitrary files.

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain access to and read arbitrary files...

The vulnerability of the SAP NetWeaver software integration platform, related to insufficient validation of input data, allows attackers to increase their privileges.

The vulnerability of the SAP NetWeaver software integration platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Intel Graphics Driver lies in its insufficient validation of input data, which allows attackers to trigger a service failure.

The vulnerability of the User Mode Driver component of Intel Graphics Drivers exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Junos operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted HTTP traffic...