Vapor Resource Management Error Vulnerability

vapor is a Swift web development framework for individual developers. Can be used to develop high-performance Web applications , support for iOS, OS X and Ubuntu systems. Vapor versions prior to 4.40.1 have a security vulnerability that can be exploited by attackers to launch DoS attacks...

Design/Logic Flaw

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 in Android O8.1 and below and 3.8.00.13 in Android P9.0 and above allows unauthorized actions including denial of service attack by hijacking the provider...

CVE-2021-25343

The CVE-2021-25343 issue affects Samsung Members on Android O (8.1) and below, and Android P (9.0) and above, where calling a non-existent provider can enable unauthorized actions including denial of service by hijacking the provider. Affected versions are prior to 2.4.81.13 for Android O–era dev...

CVE-2021-25341

The CVE-2021-25341 entry concerns Samsung S Assistant (prior to version 6.5.01.22). The vulnerability arises from calling a non-existent provider, enabling unauthorized actions including denial of service by hijacking the provider. Affected component: S Assistant provider invocation path; root ca...

PT-2021-14381 · Synapse +1 · Synapse +1

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.25.0 Description: A malicious homeserver could redirect requests to their .well-known file to a large file, leading to a denial of service attack where homeservers consume significantly more resources when requesti...

CVE-2020-35522

In LibTIFF, there is a memory malloc failure in tifpixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack...

FreeBSD : OpenSSL -- Multiple vulnerabilities (96a21236-707b-11eb-96d8-d4c9ef517024)

The OpenSSL project reports : NULL pointer deref in X509issuerandserialhash CVE-2021-23841Moderate The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to...

Security Bulletin: IBM Security Verify Information Queue does not sufficiently protect its session cookies (CVE-2021-20404)

Summary IBM Security Verify Information Queue ISIQ does not sufficiently protect its session cookies from malicious modification. Consequently, a denial-of-service attack could cause ISIQ logins to fail with an invalid token. As of v10.0.0, ISIQ has strengthened the safeguards of session cookies...

Squid < 4.13 Multiple Vulnerabilities

According to its self-reported version number, the version of Squid installed on the remote host is 5.x 5.0.4 or prior to 4.13. It is, therefore, affected by multiple vulnerabilities: - Due to incorrect data validation Squid is vulnerable to HTTP request splitting and HTTP request smuggling attac...

Digia QT has a binary vulnerability

Qt is a cross-platform C application development framework. A binary vulnerability exists in Digia QT, which can be exploited by attackers to cause a denial-of-service attack...

Denial of Service Vulnerability in ZXHN F460S at ZTE CORPORATION

ZTE Corporation is a leading global provider of integrated communications solutions. A denial of service vulnerability exists in ZXHN F460S of ZTE Corporation, which can be exploited by attackers to cause a denial of service attack...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2021-08500)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2021-08497)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2021-08507)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in SIMATIC S7-PLCSM

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM contains a binary vulnerability that can be exploited by attackers to cause a denial of service...

Binary Vulnerability in WPS Office Professional (CNVD-2021-03295)

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used office software text, tables, presentations, PDF reading and other functions. A binary vulnerability exists in WPS Office Professional Edition, which can be...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01312)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. A memory corruption vulnerability exists in WPS Office Professional, which can be exploited by attacker...

Updated compat-openssl10 packages fix security vulnerabilities

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman DH based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted...

PT-2020-8980 · Philips · Philips Hue

Name of the Vulnerable Software and Affected Versions: Philips Hue affected versions not specified Description: The issue is related to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub, causing it to stop responding. During the flood, the user won't be...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libxml2 Multiple Vulnerabilities (NS-SA-2020-0091)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libxml2 packages installed that are affected by multiple vulnerabilities: - Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of...