8239 matches found
The vulnerability in the implementation of the Linux operating system’s Layer 2 Tunneling Protocol (L2TP) kernel allows a hacker to induce a service failure.
The vulnerability of the Linux operating system’s L2TP Layer 2 Tunneling Protocol kernel implementation is related to the absence of blocking during the cleaning of skuserdata. This can lead to a race condition and the swapping of the zero pointer. Exploiting this vulnerability could allow an...
The vulnerability of the Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS Evolved and Junos operating systems allows a attacker to cause a service failure.
The vulnerability of the Routing Protocol Daemon rpd in Juniper Networks’ Junos OS Evolved and Junos operating systems exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
CVE-2023-22574
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and...
K37708118: BIG-IP DNS profile vulnerability CVE-2023-22839
Security Advisory Description When a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel TMM to terminate. CVE-2023-22839 Impact Traffic is disrupted while the T...
CVE-2022-39061
ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access partial sensitive content in memory and disrupts partial services...
PT-2023-13681 · Changingtec · Megaservisignadapter
Name of the Vulnerable Software and Affected Versions: ChangingTech MegaServiSignAdapter affected versions not specified Description: The issue is related to an Out-of-bounds Read vulnerability due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit thi...
The vulnerability of the InnoDB component of the MySQL Database Server allows a perpetrator to gain unauthorized access for reading, modifying, or deleting data, or to cause service failures.
The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service failures...
The vulnerability of the InnoDB component of the MySQL Database Server allows a perpetrator to gain unauthorized access for reading, modifying, or deleting data, or to cause service failures.
The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service failures...
Vulnerability of the MySQL Server component: Security: Encryption. This component allows a hacker to gain unauthorized access for reading, modifying, or deleting data, or to cause a service failure.
The vulnerability of the MySQL Server component’s Security: Encryption module is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions...
Hive! Hive! Hive! Ransomware site submerged by FBI
On January 26, 2023, the United States Department of Justice DoJ released details about a disruption campaign against the Hive ransomware group. The disruption campaign has reportedly had access to Hive's infrastructure since July of 2022. Its access became public on Thursday when Hive's dark web...
Ukraine Hit with New Golang-based 'SwiftSlicer' Wiper Malware in Latest Cyber Attack
Ukraine has come under a fresh cyber onslaught from Russia that involved the deployment of a previously undocumented Golang-based data wiper dubbed SwiftSlicer. ESET attributed the attack to Sandworm, a nation-state group linked to Military Unit 74455 of the Main Intelligence Directorate of the...
The vulnerability of the InnoDB component of the MySQL Database Server allows a perpetrator to gain unauthorized access for reading, modifying, or deleting data, or to cause service failures.
The vulnerability of the InnoDB component in the MySQL Database Management System is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service failures...
Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions.
The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions...
Unsecured usage of msg.sender in smart contract functions TimeswapV2Pool.sol.
Lines of code Vulnerability details Impact The bug is related to the use of the msg.sender in the smart contract functions. The msg.sender is a built-in variable in the Solidity programming language, which represents the address of the account that called the function, the msg.sender is used to...
The vulnerability of the Server Message Block Version 2 (SMB2) protocol implementation in the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), the Cisco Meraki MX network device management software, the Cisco Cyber Vision industrial network security control solution, and the Cisco Umbrella cloud security service allows a perpetrator to bypass security restrictions and cause service interruptions.
The vulnerability of the Server Message Block Version 2 SMB2 implementation in the Snort intrusion detection system of the Cisco Firepower Threat Defense FTD microprogramming network interface devices, the Cisco Meraki MX network devices, the Cisco Cyber Vision industrial network security control...
Vulnerabilities of the xtables-nft-multi and xtables-legacy-multi tools in the iptables package of the EMIAS OS operating system, which allow a hacker to trigger a memory leak.
The vulnerabilities of the xtables-nft-multi and xtables-legacy-multi tools in the iptables package of the EMIAS OS operating system are related to memory release errors. Exploiting these vulnerabilities can allow an attacker to cause service failures or other adverse effects...
The vulnerabilities of the functions gru_set_context_option(), gru_fault(), and gru_handle_user_call_os() in the SGI GRU kernel of the Linux operating system allow attackers to cause service failures or gain increased privileges.
The vulnerability of the SGI GRU driver for the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...
The vulnerability of the cbq_classify() function in the network packet scheduling subsystem (net/sched/sch_cbq.c) in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the cbqclassify function in the network packet scheduling subsystem net/sched/schcbq.c of the Linux kernel is related to an incorrect definition of the class type. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ALSA:pcm component (the audio subsystem of the Linux operating system), which allows a hacker to cause a service failure and gain unauthorized access to protected information.
The vulnerability of the ALSA:pcm component the audio subsystem of the Linux operating system is related to a synchronization violation in sndctlelemreaduser. Exploiting this vulnerability can allow an attacker to cause service failures and gain unauthorized access to protected information...
Vulnerability of SNC_io parser<EW>: read_vertex(); vh->shalfloop(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SNCioparser function involves unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is related to the...