Denial of Service Vulnerability in Configuration King HistorySvr

Configuration King, i.e. Configuration King development monitoring system software, is a new type of industrial automatic control system, which replaces the traditional closed system with an integrated system composed of standard industrial computer software and hardware platforms. There is a...

wireshark: Infinite loop in the MMSE dissector

A vulnerability in MMSE dissector allows Wireshark to loop infinitely when parsing a specially crafted pcap file. Remote attacker could cause a denial of service to Wireshark by injecting malicious packets into the network that are automatically processed...

wireshark: SIGCOMP dissector crash in packet-sigcomp.c

A denial of service flaw was found in the SIGCOMP dissector in Wireshark. A remote network attacker could potentially use this flaw to crash Wireshark by tricking it into processing a crafted packet...

Laminar Research X-Plane Buffer Overflow Vulnerability

Laminar Research X-Plane is a flight simulator from the American company Laminar Research. A buffer overflow vulnerability exists in Laminar Research X-Plane version 11.41 and earlier. An attacker could exploit this vulnerability with specially crafted network packets to cause a denial of service...

CVE-2019-19606

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...

Code injection

X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or arbitrary code execution...

Input validation

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...

CVE-2019-19605

X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or arbitrary code execution...

CVE-2019-19606

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks is related to errors in the TCP Urgent Pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted TCP packets...

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors in the TCP Urgent Pointer during the “connect” operation when connecting to a remote host. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially...

Huawei Desktop Cloud Windows Virtual Desktop Proxy Service hdpCommunication application suffers from denial of service vulnerability

Founded in 1987, Huawei Technologies Co. Ltd. is a global provider of ICT information and communications infrastructure and smart terminals. A denial-of-service vulnerability exists in the hdpCommunication application of Huawei Desktop Cloud's Windows virtual desktop proxy service. An unauthorize...

The vulnerability of the IPv4 protocol for real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the IPv4 protocol for real-time operating systems like Wind River VxWorks stems from buffer overflows in the stack during the parsing of IP packets. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted IPv4 packets...

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to trigger service interruptions.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from the loss of the integer value “TCP Urgent Pointer=0”. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted TCP packets...

CVE-2019-5105

An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy, resulting in an access violation and termination of the process. An attacker can send a packet...

Memory corruption

An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy, resulting in an access violation and termination of the process. An attacker can send a packet...

Samsung Mobile Device Resource Management Error Vulnerability

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A resource management error vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to cause a denial of service with the help of TCP SYN packets...

The vulnerability of the Anviz CrossChex access control system lies in the copying of buffers without checking the size of the input data, allowing a intruder to execute arbitrary code.

The vulnerability of the Anviz CrossChex access control system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending specially created network packets...

CVE-2019-20612

An issue was discovered on Samsung mobile devices with N7.x and O8.x Broadcom Wi-Fi, and SEC Wi-Fi chipsets software. Wi-Fi allows a denial of service via TCP SYN packets. The Samsung ID is SVE-2018-13162 March 2019...

CVE-2019-20612

The CVE-2019-20612 entry applies to Samsung mobile devices running N(7.x) and O(8.x) firmware that use Broadcom Wi‑Fi and SEC Wi‑Fi chipsets. The issue is a denial-of-service condition triggered by TCP SYN packets directed at the Wi‑Fi subsystem, with the vulnerability described as a problem in t...