1084 matches found
Cisco IOS XE Wireless Controller software denial of service vulnerability
A denial of service vulnerability exists in Cisco IOS XE Wireless Controller Software, a wireless LAN controller from Cisco, which stems from a logical error in the handling of CAPWAP Mobility The vulnerability is caused by a logic error and mismanagement of resources when handling CAPWAP Mobilit...
The vulnerability of the Bluetooth HOST microprogramming system component in Qualcomm’s embedded chips allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability of the Bluetooth HOST microprogramming system component in Qualcomm embedded chips relates to the lack of checks on buffer length and reading beyond the memory boundary when processing the l2cap parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized...
DEBIAN-CVE-2014-0148
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for blocksize and logicalsectorsize variables. These are used to derive other fields like 'sectorsperblock' etc. A user able t...
SUSE-SU-2022:3249-1 Security update for clamav
This update for clamav fixes the following issues: clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature 'Intermediates' feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...
CVE-2022-20696
A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...
CVE-2022-20696 Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability
A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...
CVE-2022-20696 Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability
A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker who has access to the VPN0 logical network to also access the messaging service ports on an affected system. This vulnerability exists because the messaging...
SUSE-SU-2022:3139-1 Security update for clamav
This update for clamav fixes the following issues: clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature 'Intermediates' feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...
U.S. Dept Of Defense: IDOR leaking PII data via VendorId parameter
Description: Dear DoD, I found one bug on your domain from Hack US program: █████ It's IDOR bug. Make sure to know that I didn't test many funcs here for IDOR. I didn't test for ATO Account Takeover. But you should fix this. Here's the PoC: ██████████ Thank you DoD! Impact An attacker could steal...
The vulnerability of the Gitaly.GetTreeEntries component in the git-based software development platform allows a hacker to cause a service failure.
The vulnerability of the Gitaly.GetTreeEntries component in the git-based software development platform for collaborative code management on GitLab is related to incorrect handling of logical operations. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Denial Of Service (DoS)
blender is vulnerable to denial of service. The vulnerability exists due to the endless infinite loop in the Blender-thumnailing component, allowing an attacker to crash the application through the logical bugs...
MGASA-2022-0312 Updated clamav packages fix security vulnerability
ClamAV 0.103.7 is a critical patch release with the following fixes: Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature "Intermediates" feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...
Updated clamav packages fix security vulnerability
ClamAV 0.103.7 is a critical patch release with the following fixes: Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature "Intermediates" feature. Relax constraints on slightly malformed zip archives that contain overlapping file entries...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
DEBIAN-CVE-2022-2833
Endless Infinite loop in Blender-thumnailing due to logical bugs...
Design/Logic Flaw
Endless Infinite loop in Blender-thumnailing due to logical bugs...
