1565 matches found
The vulnerability of the Junos operating system, related to the lack of measures for cleaning input data, allows a intruder to gain unauthorized access to the device.
The vulnerability of the Junos operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to increase their privileges and gain full control over the device, by using specially crafted combinations of CLI commands and...
The vulnerability of Huawei FusionServer’s software allows a hacker to bypass access restrictions and execute arbitrary commands.
The vulnerabilities of the FusionServer RH2288V3, FusionServer RH2288HV3, FusionServer XH628V3, FusionServer RH1288V3, FusionServer RH2288A2, FusionServer RH1288A2, FusionServer RH8100V3, FusionServer CH222V3, FusionServer CH220V3, and FusionServer CH121V3 software programs are related to the lac...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Mercurial version control software lies in the lack of measures to clean input data, allowing a perpetrator to execute arbitrary commands on the operating system.
The vulnerability of the Mercurial version control software is related to the lack of measures for cleaning input data host names sent to the SSH network protocol. Exploiting this vulnerability allows a remote attacker to execute system commands...
The vulnerability of the Android operating system, which allows a hacker to bypass the certificate verification process
The vulnerability of the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification...
The vulnerability of the RPMB process in the Android operating system allows a hacker to bypass certificate verification.
The vulnerability of the RPMB process in the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification...
[ASA-201705-6] lib32-libtirpc: denial of service
Arch Linux Security Advisory ASA-201705-6 ========================================= Severity: Medium Date : 2017-05-07 CVE-ID : CVE-2017-8779 Package : lib32-libtirpc Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-263 Summary ======= The package lib32-libtirpc...
The vulnerability of the SMBv1 protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...
The vulnerability of the QTS operating system allows a perpetrator to execute arbitrary commands and elevate their privileges to that of the system administrator.
The vulnerability of the QTS operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and increase their privileges to that of the system administrator using undefined vectors...
The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure
The vulnerability of the iOS operating system’s Graphics Driver component exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially created video...
The vulnerability of the Java Platform software platform allows a perpetrator to breach the confidentiality of information.
The vulnerability of JRockit a sub-component of 2D, components of Oracle Java SE, and the Java Platform software are due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause a system to freeze or, in rare cases, lead to an unexpected shutdown...
Vulnerability of the Java Platform software platform, which allows attackers to bypass certificate verification
The vulnerability of the RMI components of the Java Platform exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification using network packets...
Multiple vulnerabilities exist in the embedded programmable logic controller OVEEN PLK110 software, allowing a malicious actor to cause malfunctions during maintenance operations.
Multiple vulnerabilities exist in the embedded programmable logic controller OVEEN PLK110’s software, due to insufficient testing of input data. Exploitation of these vulnerabilities could allow an attacker to trigger malfunctions by repeatedly sending specially crafted requests with randomly...
The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 allows a intruder to trigger buffer overflow attacks.
The vulnerability of the embedded software of the programmable logic controller OVEEN PLK110 is related to incorrect indexing of the input data array. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow service denial by sending a specially crafted network packet whos...
openssl: EVP_EncryptUpdate overflow
An integer overflow flaw, leading to a buffer overflow, was found in the way the EVPEncryptUpdate function of OpenSSL parsed very large amounts of input data. A remote attacker could use this flaw to crash an application using OpenSSL or, possibly, execute arbitrary code with the permissions of t...
ImageMagick 'coders/rle.c' heap buffer overflow vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A heap buffer overflow vulnerability exists in ImageMagick due to ImageMagick failing to adequately define user input...
The vulnerability of the microprogramming software of the DELL SonicWALL Universal Management Appliance em5000 and the DELL SonicWALL Global Management System allows a intruder to execute arbitrary Java code.
The vulnerability of the CLIServer microprogramming software for automated network management by DELL SonicWALL Universal Management Appliance em5000, as well as the DELL SonicWALL Global Management System, is related to the lack of measures for input data cleansing. Exploiting this vulnerability...
openssl: EVP_EncryptUpdate overflow
An integer overflow flaw, leading to a buffer overflow, was found in the way the EVPEncryptUpdate function of OpenSSL parsed very large amounts of input data. A remote attacker could use this flaw to crash an application using OpenSSL or, possibly, execute arbitrary code with the permissions of t...
The vulnerability of the Cisco IOS operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco IOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...