CVE-2021-21778

A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...

F5 BIG-IP Advanced WAF and ASM TMUI is vulnerable to unspecified vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An unspecified vulnerability exists in the F5 BIG-IP Advanced WAF and ASM TMUI, which, when cracked, allows an authenticated...

The vulnerability in the driver/net/ethernet/xilinx/ll_temac_main.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/xilinx/lltemacmain.c component of the Linux operating system is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the Apache Commons Compress library, related to the allocation of unlimited memory, allows attackers to cause a service failure.

The vulnerability of the Apache Commons Compress library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using specially created TAR format files...

The vulnerability of the uv__idna_toascii() function on the Node.js software platform, which allows a malicious actor to gain unauthorized access to protected information or cause service failure.

The vulnerability of the uvidnatoascii function on the Node.js platform is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

Unix Software Discovery Commands Not Available

Nessus found problems running commands on the target host which are used to find software that is not managed by the operating system. Details of the issues encountered are reported by this plugin. Failure to properly execute commands used to find and characterize unmanaged software on the target...

The vulnerability of the microprogramming software of the modular controller for transformer substations automation by Schneider Electric Easergy T300 RTU, related to access control deficiencies, allows a intruder to gain unauthorized access to protected information, cause service failures, or execute arbitrary commands.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 RTU-based transformer automation systems is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to...

The vulnerability of the PostgreSQL database management system lies in the lack of measures taken to protect SQL query structures. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the PostgreSQL database management system is related to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures by using...

Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps

Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service DDoS attack recorded to date. The attack, launched via a Mirai botnet, is said to have targeted an unnamed customer in the financial industr...

The vulnerability of NTP protocol implementations allows attackers to induce service failures.

The vulnerability of NTP synchronization protocol implementations exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure ntpd daemon failure due to an invalid value in the :config directive...

The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading data beyond the permissible buffer size, allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the d2alawarray function in the SI libsndfile library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service interruptions...

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to access control deficiencies, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges or cause service interruptions...

PT-2021-5804 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs get attribute value. This issue may allow an attacker to access confidential data,...

Google TensorFlow数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. a denial-of-service vulnerability exists in Google TensorFlow. An attacker can exploit this vulnerability to cause a denial of service...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure by...

CVE-2021-2440

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

Helpsystems HelpSystems Cobalt Strike 安全漏洞

HelpSystems HelpSystems Cobalt Strike is a penetration testing software from HelpSystems USA. A security vulnerability in Team Server for HelpSystems Cobalt Strike 4.2 and 4.3 allows remote attackers to crash a C2 server thread and prevent beacons from communicating with it...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to uncontrolled resource consumption, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to uncontrolled resource consumption. Exploiting these vulnerabilities can...

HCC Embedded InterNiche 安全漏洞

HCC Embedded InterNiche is a newsletter software. A security vulnerability exists in HCC Embedded InterNiche stack versions prior to 4.3 and NicheLite versions prior to 4.3, which can be exploited by an attacker to cause an infinite loop that interrupts TCP/IP communication...