The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to errors in access management, allows a perpetrator to trigger a service failure.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to errors in access management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the tiffcp function in the LibTIFF library, which allows a hacker to cause a service failure

The vulnerability of the tiffcp function tiffcp.c in the LibTIFF library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the _TIFFmemcpy() function (libtiff/tif_unix.c) in the LibTIFF library, which allows a hacker to cause a service failure

Vulnerability of the TIFFmemcpy function libtiff/tifunix.c in the LibTIFF library. LibTIFF, the LibTIFF library, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the software for managing medical organizations like OpenEMR, related to lack of access control, allows a intruder to disrupt the logic of the application.

The vulnerability of the software for managing medical organizations like OpenEMR is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disrupt the logic of the application remotely...

Arbitrary file deletion

Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence...

The vulnerability of the IBM Security Guardium information protection tool lies in insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the IBM Security Guardium security tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability in the builtin.c component allows for data reformatting according to specified templates using Gawk. This enables an attacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the builtin.c component, related to data reformatting functions using the Gawk template engine, stems from the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the LibRaw::stretch() function in the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the LibRaw::stretch function in the image processing library LibRaw is related to the situation where the operation’s output goes beyond the buffer boundaries in memory when processing CRW files. Exploiting this vulnerability could allow a remote attacker to cause service...

Microsoft 365 Defender demonstrates 100 percent protection coverage in the 2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise

For the fifth consecutive year, Microsoft 365 Defender demonstrated industry-leading extended detection and response XDR capabilities in the independent MITRE Engenuity ATT&CK® Evaluations: Enterprise. The attack used during the test highlights the importance of a unified XDR platform and showcas...

The vulnerability of the swf_def_font function (SceneManager/swfParse.c:1449) in the multimedia platform GPAC allows a perpetrator to cause service failure.

The vulnerability of the swfdeffont function SceneManager/swfParse.c:1449 in the multimedia platform GPAC is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the Object::getString component of the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the Object::getString component in the Poppler PDF rendering library is related to the insufficient use of the assert function. Exploiting this vulnerability may allow an attacker to cause a service failure...

PT-2023-7770 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the use of hardcoded credentials in a monitoring tool. Exploitation of this issue may allow an attacker to read, modify, or delete data, execute arbitrary code, or...

The vulnerability of the bfd_mach_o_get_synthetic_symtab function in the GNU Binutils development environment allows a attacker to cause a service failure or exert other effects.

The vulnerability of the bfdmachogetsyntheticsymtab function in the GNU Binutils development toolset is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause service failures or other adverse effects...

The vulnerability of the x3f_utils_patched.cpp component in the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the x3futilspatched.cpp component in the LibRaw image processing library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Biden National Cybersecurity Strategy Key Takeaways

Major changes are underway, with new rules for federal agencies and updated requirements for public-private partnerships. We discuss the implementation plans for the strategy's first two pillars: defend critical infrastructure and disrupt and dismantle threat actors...

The vulnerability of the ds_compress.cc component in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the dscompress.cc component in the MariaDB database management system arises due to blocking resource errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the my_wildcmp_8bit_impl component of the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the mywildcmp8bitimpl component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the item_subselect.cc component of the MariaDB database management system allows a hacker to cause service failures.

The vulnerability of the itemsubselect.cc component of the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package allows a hacker to cause a service failure or exert other effects.

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...