CVE-2016-5285

CVE-2016-5285 is a NULL pointer dereference in Mozilla NSS caused by a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime. The vulnerability can allow a remote attacker to crash a TLS/SSL server (Denial of Service). Affected context in the provided documents includes NS...

CVE-2021-25649

CVE-2021-25649 affects Avaya Aura Utility Services (directory and file management) across all 7.x releases. The vulnerability is an information disclosure allowing any local user to access system functionality and configuration information that should be privileged, with CVSS3.1: AV:L/AC:L/PR:L/U...

CVE-2021-25651

CVE-2021-25651 affects Avaya Aura Utility Services (all 7.x versions). The connected documents confirm a local privilege-escalation vulnerability in this software, with the root cause described only as a privilege escalation issue and no publicly available mitigation/fix details in the provided s...

CVE-2021-25650

CVE-2021-25650 affects Avaya Aura Utility Services (7.x). The connected sources describe a privilege escalation vulnerability that could allow a local user to execute specially crafted scripts with elevated privileges within Avaya Aura Utility Services. The exact root cause details, impacted file...