8092 matches found
PT-2024-2810 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the BitLocker data protection function of the Microsoft Windows operating system. This vulnerability is associat...
The vulnerability in the file src/gif.imageio/gifinput.cpp of the OpenImageIO image processing library allows a attacker to cause a service failure.
The vulnerability in the src/gif.imageio/gifinput.cpp file of the OpenImageIO library relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Navigating SQL Injection Vulnerabilities with DAST for Modern AppSec
The digital landscape is continuously evolving, and with it, the strategies for safeguarding our applications against vulnerabilities. In a recent advisory, CISA & the FBI have highlighted the critical importance of conducting thorough reviews of code and supply chains. The aim is to unearth any...
The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean arises from insufficient verification of the communication channel source. This vulnerability allows attackers to trigger service failures.
The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow a malicious actor ...
The vulnerability of the proxy server of the cloud messaging and Apache Pulsar streaming platform allows attackers to expose sensitive information and cause service failures.
The vulnerability of a cloud messaging and Apache Pulsar streaming service’s proxy server lies in the lack of authentication checks for a critical function. Exploiting this vulnerability allows an attacker to disclose protected information and cause service failures...
The vulnerability of the `node::http2::Http2Session::~Http2Session()` function in HTTP/2 server software for Node.js allows attackers to cause service failures.
The vulnerability of the node::http2::Http2Session::Http2Session function in HTTP/2 server-side software for Node.js is related to an uncontrolled resource consumption due to incorrect handling of header termination when processing CONTINUATION frames. Exploiting this vulnerability can allow a...
The vulnerability in the /krb5/src/lib/rpc/pmap_rmt.c component of the Kerberos network protocol allows a attacker to cause a service failure.
The vulnerability in the /krb5/src/lib/rpc/pmaprmt.c component of the Kerberos network protocol is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the web interface of Netgear’s microprogrammed router software, models CBR40, CBK40, and CBK43, allows attackers to disclose protected information or cause service failures.
The vulnerability of the web interface of Netgear CBR40, Netgear CBK40, and Netgear CBK43 microprogrammed software routers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...
The vulnerability of the Vorbis-tools package, related to the ability to write beyond the buffer boundaries in memory, allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Vorbis-tools package lies in its ability to write beyond the buffer boundaries in memory during the conversion of WAV files into OGG files. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...
The software of the centralized backup and disaster recovery management system of Dell PowerProtect Data Manager is vulnerable due to incorrect restrictions on XML references to external objects. This vulnerability allows attackers to gain unauthorized access to confidential data or cause service failures.
The vulnerability of the Dell PowerProtect Data Manager’s centralized backup and recovery software lies in improper restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data or cause service failures...
A Vigilante Hacker Took Down North Korea’s Internet. Now He’s Taking Off His Mask
As “P4x,” Alejandro Caceres single-handedly disrupted the internet of an entire country. Then he tried to show the US military how it can—and should—adopt his methods...
The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to cause service failures.
The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures through specially crafted HTTP/2 requests...
The vulnerability of the `pic_parameter_set::dump()` function in the h.265 Libde265 implementation allows a attacker to disclose protected information or cause service failures.
The vulnerability of the picparameterset::dump function in the h.265 Libde265 implementation is related to buffer overflows caused by the parameters numtilecolumns and numtilerow. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...
Unveiling the Fallout: Operation Cronos' Impact on LockBit Following Landmark Disruption
Our new article provides key highlights and takeaways from Operation Cronos' disruption of LockBit's operations, as well as telemetry details on how LockBit actors operated post-disruption...
The vulnerability of the T.38 discanner, a traffic analysis tool for computer networks used by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the T.38 discapper, a traffic analysis tool for computer networks developed by Wireshark, is related to unsynchronized memory management. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted file or packet...
The vulnerability of the PowerScale OneFS operating system, related to incorrect session duration, allows a attacker to trigger a service failure.
The vulnerability of the PowerScale OneFS operating system is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
CVE-2024-28288
Ruijie RG-NBR700GW 10.34b12 router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can use this vulnerability to log in to the device and disrupt the business of the enterprise...
CVE-2024-28288
Ruijie RG-NBR700GW 10.34b12 router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can use this vulnerability to log in to the device and disrupt the business of the enterprise...
CVE-2024-28288
Ruijie RG-NBR700GW 10.34b12 router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can use this vulnerability to log in to the device and disrupt the business of the enterprise...
PT-2024-2959 · Ruijie · Ruijie Rg-Nbr700Gw
Name of the Vulnerable Software and Affected Versions: Ruijie RG-NBR700GW version 10.34b12 Description: The issue is related to a lack of cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can exploit this to log in to the devi...