67 matches found
CVE-2023-39296
A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the...
CVE-2023-39296
A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the...
Code injection
A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the...
CVE-2023-39296 QTS, QuTS hero
A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the...
CVE-2023-39296
CVE-2023-39296 is a prototype pollution vulnerability affecting QNAP QTS and QuTS hero. The issue allows overriding existing attributes with incompatible types, potentially causing a crash over a network (no user interaction required). Official analysis and multiple feeds confirm the affected pro...
QNAP Systems QTS and QuTS hero security vulnerabilities
QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS prior to version...
kernel: NULL pointer dereference in rawv6_push_pending_frames
A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...
kernel: NULL pointer dereference in rawv6_push_pending_frames
A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash...
SUSE CVE-2019-14323
SSDP Responder 1.x through 1.5 mishandles incoming network messages, leading to a stack-based buffer overflow by 1 byte. This results in a crash of the server, but only when strict stack checking is enabled. This is caused by an off-by-one error in ssdprecv in ssdpd.c...
PT-2022-24202 · Cms800 +1 · Cms800 +1
Name of the Vulnerable Software and Affected Versions: CMS800 affected versions not specified CME8000 affected versions not specified Description: The issue arises when the device attempts to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issu...
Phoenix Contact FL SWITCH竞争条件问题漏洞
The Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact FL SWITCH SMCS, which can be exploited by an attacker to send a manual tcp packet with the emergency flag set and the emergency pointer set to...
MGASA-2021-0188 Updated chromium-browser-stable package fixes security vulnerabilities
The updated packages fix security vulnerabilities and a crash when a device does some cast traffic in the local network. See upstream release notes...
CVE-2021-20987 Hilscher: EtherNet/IP stack crash for specific CIP service
A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...
CVE-2020-13775
ZNC 1.8.0 up to 1.8.1-rc1 allows authenticated users to trigger an application crash with a NULL pointer dereference if echo-message is not enabled and there is no network...
EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1592)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Linux kernel's implementation of GRO. This flaw allows an attacker with local access to crash the system.CVE-2020-10720 ...
The vulnerability of the MySQL database management system allows a hacker to cause a service failure.
The vulnerability of the Server: Replication sub-component of the MySQL database management system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...
Kernel: net: IPv6: panic when UFO=On for an interface
net/ipv6/ip6output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload UFO processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service memory corruption and system crash or...
BlackBerry Enterprise Servers vulnerable to TIFF Image based Exploit
If you are a BlackBerry Enterprise Network user, here is something you need to be careful about. BlackBerry Enterprise Server BES users have been warned that an image-based exploit could allow hackers to access and execute code on the servers used to support corporate users of BlackBerry...
Europe tests cyber defences against hackers
BRUSSELS AFP – European computer guards battled Thursday against a simulated attempt by hackers to bring down critical Internet services in the first pan-continental test of cyber defences. All 27 of the European Union's member nations as well as Iceland, Norway and Switzerland took part in the...
Secure Network Messenger 1.4.2 - Denial of Service
!/usr/bin/perl use IO::Socket; print "\nSecure Network Messenger Crasher by ClearScreen\n"; print "\nEnter host to crash: "; $h = ; chomp $h; $socks = IO::Socket::INET-new Proto = "tcp", PeerPort = "6144", PeerAddr = "$h" or die "\nNo response from host."; sleep 1; print "\nSuccesfully connected ...