OpenSSL -- NULL pointer de-reference

The OpenSSL project reports: EDIPARTYNAME NULL pointer de-reference High The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different instances of a...

Binary Vulnerability in ZTE UC TP220 Upper PC Screen Setting Tool

Shenzhen Zhongda U-control Technology Co., Ltd. is an industrial visual touch control products - human-machine interface, text display, programmable logic controller PLC core technology research and development and overcome, professional development, sales as one of the high-tech enterprises. A...

QEMU code issue vulnerability (CNVD-2021-39773)

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU has a code issue vulnerability that can be exploited by an attacker to force an assertion error via QEMU's usb packet mapping to trigger a...

EulerOS 2.0 SP9 : jbigkit (EulerOS-SA-2020-2497)

According to the version of the jbigkit package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of servi...

CVE-2019-12412

A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a process crash. A remote attacker could send a request causing a process crash which could lead to a denial of service attack...

Input validation

The affected product does not properly validate input, which may allow an attacker to execute a denial-of-service attack on the NIO 50 all versions...

Input validation

An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An attacker in a privileged network position may be able to perform denial of service attack using malformed Bluetooth packets...

CVE-2020-9914

An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An attacker in a privileged network position may be able to perform denial of service attack using malformed Bluetooth packets...

Information disclosure

ARC Informatique PcVue prior to version 12.0.17 is vulnerable to a denial-of-service attack due to the ability of an unauthorized user to modify information used to validate messages sent by legitimate web clients. This issue also affects third-party systems based on the Web Services Toolkit...

SonicOS SSLVPN unauthenticated buffer overflow leads to firewall crash

A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service DoS on the firewall SSLVPN service and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3 and SonicO...

Security Bulletin: IBM Security Guardium is affected by an Improper Access Control vulnerability

Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2020-4307 DESCRIPTION: IBM Security Guardium could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service attack. CVSS Base score: 6.5 CVSS...

CVE-2020-26164

In kdeconnect-kde aka KDE Connect before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack...

Wireshark BLIPP Parser Denial of Service Vulnerability

Wireshark is a suite of network packet analysis software from the Wireshark team. A security vulnerability in the Wireshark BLIP parser's processing of messages allows remote attackers to exploit the vulnerability to submit special requests that can crash applications...

Ubuntu: Security Advisory (USN-4529-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : LibOFX vulnerability (USN-4523-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4523-1 advisory. It was discovered that LibOFX did not properly check for errors in certain situations, leading to a NULL pointer dereference. A remote attacker could use this iss...

Integer overflow

An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service attack or a potential RCE via crafted JavaScript. Note that this is only exploitable if the application using Hermes...

Cisco 7937G Denial-of-Service Attack

This module exploits a bug in how the conference station handles incoming SSH connections that provide an incompatible key exchange. By connecting with an incompatible key exchange, the device becomes nonresponsive until it is manually power cycled. Module Options msf use...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Secure Proxy

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling Secure Proxy. These issues were disclosed as part of the IBM Java SDK updates in July and October 2018. Vulnerability Details CVEID: CVE-2018-1517 DESCRIPTION: A flaw in the java.math...

Denial Of Service (DoS)

apostrophe is vulnerable to denial of service DoS. An attacker is able to cause an application crash by attempting to get an advisory lock on a document through self.apiRoute function in routes.js...

GitHub Flavored Markdown Input Validation Error Vulnerability

GitHub Flavored Markdown is a CommonMark parsing and rendering library for use in C from GitHub, USA. An input validation error vulnerability exists in versions prior to GitHub Flavored Markdown 0.29.0.gfm.1. The vulnerability stems from a networked system or product that does not properly valida...