F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. An input validation error vulnerability exists in F5 BIG-IP versions 16.1.x through prior to 16.1.3, 15.1.x through prior to...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is the 17th major release of macOS, Apple's operating system for the MAC, from Apple USA. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from the fact that processing a maliciously crafted AppleScript binary may result in the unexpected termination or...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is the 17th major release of macOS, Apple's operating system for the MAC, from Apple USA. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from the fact that processing a maliciously crafted AppleScript binary may result in the unexpected termination or...

CVE-2022-2088

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0...

Design/Logic Flaw

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0...

CVE-2022-2088

CVE-2022-2088 affects Elcomplus SmartICS v2.3.4.0. The root cause is an improper access control vulnerability that allows an authenticated user with admin privileges to terminate any process on the system running SmartICS. This is documented in multiple sources including the CISA ICS advisory (IC...

CVE-2022-2088 Elcomplus SmartICS Access Control

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0...

CVE-2022-2088 Elcomplus SmartICS Access Control

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0...

PT-2022-3470 · Elcomplus · Elcomplus Smartics

Name of the Vulnerable Software and Affected Versions: Elcomplus SmartICS version 2.3.4.0 Description: The issue is related to inadequate access control in the Elcomplus SmartICS platform, which can be exploited by a remote attacker to terminate any process in the system. An authenticated user wi...

The vulnerability of the asynchronous input/output interface io_uring in Linux kernel allows a attacker to prematurely terminate the process or gain elevated privileges.

The vulnerability of the asynchronous input/output interface iouring in Linux operating systems is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to abruptly terminate the process or gain increased privileges...

Denial Of Service (DoS)

servicemesh-proxy is vulnerable to denial of service. When a cluster is deleted via Cluster Discovery Service CDS all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in the procedure of disconnecting idle connections that can lead to stack...

GHSA-F5X9-8JWC-25RW Uncaught Exception (due to a data race) leads to process termination in Waitress

Impact Waitress may terminate early due to a thread closing a socket while the main thread is about to call select. This will lead to the main thread raising an exception that is not handled and then causing the entire application to be killed. Patches This issue has been fixed in Waitress 2.1.2 ...

Denial Of Service (DoS)

waitress is vulnerable to denial of service. An authenticated attacker is able to terminate the process prior to the preferred moment because a thread could close a socket while the main thread is about to call select function, leading to an application crash...

CVE-2022-31015 Uncaught Exception (due to a data race) leads to process termination in Waitress

Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select. This will lead to the main thread raising an exception that is not handled and then causing t...

CVE-2022-31015 Uncaught Exception (due to a data race) leads to process termination in Waitress

Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket while the main thread is about to call select. This will lead to the main thread raising an exception that is not handled and then causing t...

Security Bulletin: Vulnerability in bind (CVE-2021-25214) affects Power HMC

Summary BIND is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE Vulnerability Details CVEID: CVE-2021-25214 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a broken inbound incremental zone update IXFR. By sending a specially crafted IXFR,...

expat: Integer overflow in addBinding in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality a...

expat: Integer overflow in doProlog in xmlparse.c

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability,...

CVE-2022-26890

On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Sessi...

Code injection

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel TMM process to terminate. Note:...