Denial of service

There is a denial of service DoS vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS...

CVE-2021-22292

There is a denial of service DoS vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS...

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over that information.

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or...

HPESBST04064 rev.1 - HPE B-series Fibre Channel SAN Switch Brocade Fabric OS (FOS), Remote Unauthorized Access

Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN3600B Fibre Channel Switch - Prior to v9.0.0a, and v8.1.0 to v8.2.2c HPE B-series SN4000B SAN Extension Switch - Prior to v9.0.0a, and v8.1.0 to v8.2.2c HPE B-seri...

CVE-2020-1847

There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions...

The vulnerability of the Hotspot component in Java SE and Java SE Embedded software allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Hotspot component in Java SE and Java SE Embedded software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or to modify, add, or delete data...

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Close Manager component of the Oracle Hyperion Financial Close Management application relates to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

CVE-2019-5321

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007, 16.10. before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI...

CVE-2019-5321

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007, 16.10. before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI...

Design/Logic Flaw

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007, 16.10. before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI...

CVE-2019-5321

Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007, 16.10. before 16.10.0003 are vulnerable to Remote Unauthorized Access in the WebUI...

CVE-2019-5321

CVE-2019-5321 affects Aruba Intelligent Edge Switch Series 2540, 2530, 2930F, 2930M, 2920, 5400R, and 3810M with firmware versions: 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, and 16.10.* before 16.10.0003. The issue is a vulnerability in the Web Management Interface that allows Remote ...

VulnCheck KEV: CVE-2019-7192

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system...

The vulnerability of the RDBMS/Optimizer component of the Oracle Database Server system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the RDBMS/Optimizer component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the Oracle Net protocol...

The vulnerability of the “credentialhelper” component in the distributed Git version control system, related to insufficient protection of registration data, allows a malicious actor to access confidential information.

The vulnerability of the “credentialhelper” component in the distributed Git version control system is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information through ...

PT-2020-6094 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings version 4.6.11 Description: The issue is related to the airhost.exe executable file in Zoom Client for Meetings, which uses a hardcoded registration data with the SHA-256 hashing algorithm. This could allow a remote...

The vulnerability of the Cisco Data Center Network Manager, a system for network management at data centers, allows a malicious individual to gain unauthorized access to JBoss EAP.

The vulnerability of the Cisco Data Center Network Manager system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to JBoss EAP from a remote location...

Synergy Systems & Solutions HUSKY RTU (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Synergy Systems & Solutions SSS Equipment: HUSKY RTU --------- Begin Update A Part 1 of 3 --------- Vulnerabilities : Improper Authentication, Improper Input Validation, Missing Authentication for...

CVE-2019-9493

The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn the location of a target, or gain...

HPSBGN03644 rev. 1 - HP Device Manager VNC Session Remote Unauthorized Access

Potential Security Impact Remote Unauthorized Access Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has identified an issue affecting VNC session security within HP Device Manager that could potentially be leveraged to create unauthorized connections. RESOLUTION HP is...