The vulnerability of the Apache Commons Compress library lies in the execution of a loop without sufficient limitation on the number of iterations it can perform. This allows attackers to trigger a service failure.

The vulnerability of the Apache Commons Compress library lies in the execution of a loop without sufficient restrictions on its iteration count. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions by creating specially crafted 7Z format files...

The vulnerability of DNS-client TCP/IP clients of NicheLite and InterNiche allows a hacker to induce a service failure.

The vulnerability of TCP/IP client applications of NicheLite and InterNiche lies in errors during the processing of input data length parameters. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability in the implementation of the ICMP checksum protocol for TCP/IP implementations like NicheLite and InterNiche allows a attacker to cause a service failure.

The vulnerability of the ICMP checksum implementation in TCP/IP implementations like NicheLite and InterNiche is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Siemens SIMATIC 安全特征问题漏洞

The LOGO! CMR family is a communication system for monitoring and controlling distributed devices and systems via text messages or e-mail.Siemens SIMATIC RTU3000C is a compact RTU from Siemens, Germany is a low-power remote terminal unit RTU for energy self-sufficiency. A vulnerability in the...

CVE-2021-33011

CVE-2021-33011 affects TOYOPUC product families (PC10, Plus, PC3J/PC2J, Nano) where ICMP flooding may prevent normal Ethernet communication, due to an allocation of resources without limits or throttling (CWE-770). RedHat, NVD, CNNVD and related advisories detail vulnerable components and listed ...

The vulnerability of the “diagnose system geoip-city” command in the CLI interface of the Fortinet FortiManager device management software, as well as the Fortinet FortiAnalyzer event monitoring and analysis tool, allows a malicious actor to trigger a service failure.

The vulnerability of the “diagnose system geoip-city” command in the CLI Command Line Interface of the Fortinet FortiManager device management software, as well as the Fortinet FortiAnalyzer event monitoring and analysis tool, is related to an operation that occurs outside of the buffer in memory...

DEBIAN-CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

UBUNTU-CVE-2021-3761

Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network for example AS 13335 - Cloudflare prior to launching a BGP hijack which...

ROS-2-499

2.499 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

Cisco IOS XR 代码问题漏洞

Cisco IOS XR Software is a set of operating systems developed by Cisco for its network devices.Cisco IOS XR Software DHCP denial of service vulnerability can be exploited to trigger a crash of the dhcpd process, resulting in a denial of service...

ROS-2-448

2.448 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability Description: A corrective release of the OpenVPN Virtual Private Networking Package 2.4.9 has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

CVE-2021-34144

The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMPSCOLinkRequest packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections disabling the AB5301A inqui...

The vulnerability of the SMBv2 component of the Windows operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the SMBv2 component of the Windows operating system is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of Adobe Acrobat’s PDF editing software, related to errors in code generation, allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the Adobe Acrobat PDF editing program is related to errors in code generation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service interruptions...

The vulnerability of the SMBv2 component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the SMBv2 component of the Windows operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

FBI warns of ransomware threat to food and agriculture

The FBI has issued a Private Industry Notification PIN about cybercriminal actors targeting the food and agriculture sector with ransomware attacks. Farms are literally the first step in one of the most important, if not the most important, supply chain in our economy: The food supply chain. As...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the manipulation of the null pointer, allowing attackers to trigger service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the handling of the null pointer. Exploiting these vulnerabilities can allow...

How to stay secure from ransomware attacks this Labor Day weekend

Labor Day weekend is just around the corner and, believe it or not, cybercriminals are likely just as excited as you are! Ransomware gangs have nurtured a nasty habit of starting their attacks at the least convenient times: When computers are idle, when employees who might notice a problem are ou...

F5 BIG-IP Advanced WAF and ASM WebSocket Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP Advanced WAF and ASM WebSocket, which originates from the BIG-IP...

CVE-2021-1523

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, which could result in critical control plane traffic to the device being dropped. This could result in...