1450 matches found
Oracle GraalVM Input Validation Error Vulnerability (CNVD-2022-15474)
Oracle GraalVM Enterprise Edition is the enterprise version of GraalVM, a vulnerability in Oracle GraalVM Enterprise Edition caused by incorrect input validation in the 2D component of Oracle GraalVM Enterprise Edition. Edition contains incorrect input validation in the 2D component. A remote,...
CVE-2021-23236
Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system...
Hardcoded credentials
Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system...
CVE-2021-23236 Fresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption
Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system...
The vulnerability in the implementation of the Control Point and Wireless Access Point Provisioning Protocol (CAPWAP) of the Cisco IOS XE operating system allows a attacker to trigger a service failure.
The vulnerability of the CAPWAP management protocol implementation and wireless access point provisioning in Cisco IOS XE operating systems is related to insufficient validation of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the implementation of the Control Point and Wireless Access Point Provisioning Protocol (CAPWAP) in the Cisco IOS XE operating system allows a attacker to trigger a service failure.
The vulnerability of the CAPWAP management protocol implementation and wireless access point provisioning in Cisco IOS XE operating systems is related to insufficient validation of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Atlassian Jira Access Control Error Vulnerability (CNVD-2022-05438)
Atlassian Jira is a defect tracking management system from Atlassian Australia. An access control error vulnerability exists in Atlassian Jira Server and Data Center due to an interruption access control vulnerability in /secure/EditSubscription.jspa, which can be exploited by a remote,...
The vulnerability of the AutoReconnect function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.
The vulnerability of the AutoReconnect function in Cisco IOS XE and Cisco IOS systems is related to memory leaks. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Network Address Translation (NAT) technology implementation in Cisco IOS XE operating systems allows a hacker to induce a service failure.
The vulnerability of the Network Address Translation NAT technology implementation in Cisco IOS XE operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...
CVE-2021-4024
A flaw was found in podman. The podman machine function used to create and manage Podman virtual machine containing a Podman process spawns a gvproxy process on the host system. The gvproxy API is accessible on port 7777 on all IP addresses on the host. If that port is open on the host's firewall...
Fresenius Kabi Agilia Connect Infusion System 资源管理错误漏洞
The Fresenius Kabi Agilia Connect Infusion System is an infusion system from Fresenius Kabi, a German company, that is vulnerable to a resource management error that could be exploited by an attacker to interrupt the normal operation of the device. normal operation of the device...
The vulnerability of the Hyper-V hardware virtualization system of the Microsoft Windows operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization technology of the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Hyper-V hardware virtualization system of the Microsoft Windows operating system, which allows a hacker to trigger a service failure.
The vulnerability of the Hyper-V hardware virtualization technology of the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Adobe Experience Manager content and media data management system, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Adobe Experience Manager content and media data management system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the MAP-E automatic tunneling mechanism in the Junos operating system, which allows a hacker to trigger a service failure.
The vulnerability of the MAP-E automatic tunneling mechanism in the Junos operating system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...
The vulnerability of component C12.22 of the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of component C12.22 of the Wireshark network traffic analyzer is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting specially created packets...
Sunnet eHRD Access Control Error Vulnerability
Sunnet eHRD is a talent management system from SunChat Technology, Taiwan, China. The system supports talent management and performance management, etc. Sunnet eHRD has an access control error vulnerability, which can be exploited by an attacker to access the account management page after...
CVE-2021-43359
Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services...
Input validation
Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...
CVE-2021-43360
Sunnet eHRD is a talent management system from Sun Chat Technology. The CVE-2021-43360 vulnerability affects its e-mail delivery task schedule’s serialization function, where inadequate input object validation and restriction allows a post-authenticated remote attacker with database access privil...