6992 matches found
CVE-2021-32198
EmTec ZOC through 8.02.4 allows remote servers to cause a denial of service Windows GUI hang by telling the ZOC window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon...
Emtec ZOC security vulnerabilities
Emtec ZOC is Emtec's application software a professional ssh, telnet and serial terminal emulator. A security vulnerability in EmTec ZOC before 8.02.2 allows a remote server to cause a denial of service by telling the ZOC window to change its title repeatedly at high speed...
Wonderware InTouch Buffer Overflow
The vulnerability of the application development module for HMI Window Maker in Wonderware InTouch SCADA systems relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause damage to multiple stack frames and re-write...
Wonderware InTouch Buffer Overflow
The vulnerability of the application development module for HMI Window Maker in Wonderware InTouch SCADA systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to reassign the return address and trigger an emergency shutdown using a specially craft...
EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2021-1964)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy...
EulerOS Virtualization 2.9.0 : binutils (EulerOS-SA-2021-1974)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy...
Wonderware InTouch Buffer Overflow
The vulnerability of the application development module for HMI Window Maker in Wonderware InTouch systems is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause an emergency shutdown of the system using a specially crafted file...
CVE-2021-28847
MobaXterm before 21.0 allows remote servers to cause a denial of service Windows GUI hang via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls...
PT-2021-17964
Name of the Vulnerable Software and Affected Versions: Mintty versions prior to 3.4.5 Description: The issue allows remote servers to cause a denial of service, resulting in a Windows GUI hang, by repeatedly changing the Mintty window title at high speed. This leads to many SetWindowTextA or...
MobaXterm Resource Management Vulnerability
Mobatek MobaXterm is a suite of terminal software from the French company Mobatek that integrates an enhanced terminal, an X server and a Unix command set GNU/Cygwin. MobaXterm prior to 21.0 suffers from a security vulnerability that allows a remote server to cause a denial of service Windows GUI...
Mintty
Mintty is an application software Cygwin terminal emulator, also available for MSYS and Msys2. Mintty has a security vulnerability that can be exploited by an attacker to cause a denial of service Windows GUI hang by telling the Mintty window to repeatedly change its title at high speed, which...
libX11 Heap Buffer Overflow DoS
The vulnerability of the XLookupColor function in the libX11 library is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a denial-of-service attack by running a specially created application on the system...
DEBIAN-CVE-2021-31535
LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request intended for server-side color lookup contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allow...
UBUNTU-CVE-2020-25697
A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to...
Apple iPadOS Resource Management Vulnerability
Apple iPadOS is an operating system from Apple Inc. for the iPad tablet computer. Apple iPadOS suffers from a resource management error vulnerability that stems from improper window management in the Notes application. An attacker could exploit the vulnerability to view restricted content from th...
Postbird cross-site scripting vulnerability
postbird is a software application. for a cross-platform PostgreSQL GUI client written in JavaScript that runs with Electron. A cross-site scripting vulnerability exists in Postbird version 0.8.4, which stems from allowing XSS to be stored via the onerror attribute of the IMG element of any...
PT-2021-18793
Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.4 Description A person with physical access to a Mac may be able to bypass the Login Window during a software update. This issue was addressed with improved checks. Recommendations For macOS Big Sur versions...
PT-2021-18817
Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4 Security Update versions prior to 2021-003 Catalina Security Update versions prior to 2021-004 Mojave Description A logic issue was addressed with improved state management, which could allow a person with physical...
CVE-2021-33500
PuTTY before 0.75 on Windows allows remote servers to cause a denial of service Windows GUI hang by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs ...
CVE-2021-33500
PuTTY before 0.75 on Windows allows remote servers to cause a denial of service Windows GUI hang by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs ...