Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the loadClusterProps function in the FileConfigStore component. An attacker can exfiltrate sensitive server files by setting imq.cluster.url to an arbitrary local path e.g., file:///etc/passwd and then running...

The vulnerability of the SATA_DWC_QCMD_MAX() function in the Linux kernel driver/ata/sata_dwc_460ex.c file allows a hacker to cause a service failure.

The vulnerability of the SATADWCQCMDMAX function in the Linux kernel’s drivers/ata/satadwc460ex.c file is related to read errors outside of the allowed range. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2009-0071

Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a certain a replaceChild or b removeChild call, followed by a 1 queryCommandValue, 2 queryCommandState, or 3...

Multiple Dahua Products Input Validation Error Vulnerability (CNVD-2020-22980)

Dahua SD6AL Series and so on are the products of Dahua, China.SD6AL Series is a network camera of SD6AL series.NVR 5x Series is a network video recorder of 5x series.IPC-HX2XXX Series is a network camera of IPC-HX2XXX series.NVR 5x Series is a network video recorder of 5x series.NVR 5x Series is ...

CVE-2020-9500

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down...

Design/Logic Flaw

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down...

CVE-2020-9500

CVE-2020-9500 affects some Dahua products; the vulnerability allows Denial of Service after a legal-account login by sending a specific log query, potentially causing the device to go down. The alert/guidance in connected sources is limited to describing the DoS condition without publicly disclos...

CVE-2020-9500

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down...

CVE-2020-9500: Undefined Security Weakness

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down...

PT-2020-20703

Name of the Vulnerable Software and Affected Versions Dahua products affected versions not specified Description The issue allows an attacker to cause a Denial of Service after successfully logging in with a legal account. This is achieved by sending a specific log query command, which may cause...

Denial Of Service (DoS)

RubyGems is vulnerable to denial of service attacks. A local attacker can supply a specially crafted 'query' command to cause denial of service conditions by excessive CPU usage while parsing a sufficiently long gem summary. Query Command Handler is the affected component...

PT-2018-16087

Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager version 6.0 Description A SQL injection remote code execution issue in the CGGIServlet component could allow a remote attacker to execute arbitrary code on vulnerable installations. This issue is related to the ID...

Fedora 25 : ruby (2017-e136d63c99)

Fix ANSI escape sequence vulnerability CVE-2017-0899. - Fix DoS vulnerability in the query command CVE-2017-0900. - Fix a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files CVE-2017-0901. - Fix DNS request hijacking vulnerability CVE-2017-0902. - Fix...

DEBIAN-CVE-2017-0900

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a query command...

ALPINE-CVE-2017-0900

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a query command...

CVE-2017-0900

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a query command...

CVE-2017-0900

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a "query" command...

CVE-2017-0900

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a query command...

CVE-2017-0900: Improper Input Validation

RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a query command...

PT-2017-10701

Name of the Vulnerable Software and Affected Versions RubyGems versions 2.6.12 and earlier Description The issue allows maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a query command. Recommendations For RubyGems versions 2.6.12...