The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause a partial service failure using the...

The vulnerability of the Proxy-Authentication component of the Squid proxy server allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Proxy-Authentication component of the Squid proxy server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of component http.c in the Exiv2 metadata management library, which allows a hacker to cause a service failure.

The vulnerability of the http.c component in the Exiv2 metadata management library is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the bns_restore function in the Burrow-Wheeler Aligner’s reading mapping software package allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the bnsrestore function in the Burrow-Wheeler Aligner reading mapping software package is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary...

Vulnerability of the Server:Security:Privileges component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server:Security:Privileges component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious individual to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause a partial service failure using the...

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Replication component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a service failure using the MySQL network protocol...

Vulnerability of the Server:Memcached component of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server:Memcached component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the Memcached network protocol...

The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to trigger a service failure.

The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger...

The vulnerability of Cisco Aironet Access Points of models 1540 and 1800, related to improper processing of client packets sent to the vulnerable access point, allows a perpetrator to cause service failure.

The vulnerability of Cisco Aironet Access Points models 1540 and 1800 relates to the improper processing of client packets sent to the vulnerable access points. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packets...

The vulnerability in the DCE-RPC interaction interface of Siemens’ software and hardware infrastructure allows a perpetrator to trigger a service failure.

The vulnerability of the DCE-RPC interaction interface of Siemens’ software and hardware infrastructure is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...

Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

Chinese Researchers Disrupt Malware Attack That Infected Thousands of PCs

Chinese security firm Qihoo 360 Netlab said it partnered with tech giant Baidu to disrupt a malware botnet infecting over hundreds of thousands of systems. The botnet was traced back to a group it calls ShuangQiang also called Double Gun, which has been behind several attacks since 2017 aimed at...

The vulnerability of the sub-component Federation of the Oracle Access Manager software component of the Oracle Fusion Middleware, which allows a perpetrator to cause a partial service disruption.

The vulnerability of the Federation sub-component of the Oracle Access Manager software component within the Oracle Fusion Middleware platform is related to resource release errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through...

The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system’s simulation model, Oracle Financial Services Applications. This vulnerability allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data. It can also cause partial service interruption.

The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system, an imitation model of Oracle Financial Services Applications, is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious act...

CISA, IRS, USSS, and Treasury Release Joint Alert on Scams Related to Coronavirus Economic Impact Payments

The Cybersecurity and Infrastructure Security Agency CISA, U.S. Department of the Treasury, Internal Revenue Service IRS, and United States Secret Service USSS have released a Joint Alert with mitigations to help Americans avoid scams related to coronavirus economic impact payments—particularly...

The vulnerability of the Oracle Application Express component of the Oracle Database Server database management system allows a perpetrator to gain access to read, delete, and modify data, or to cause a service failure.

The vulnerability of the Oracle Application Express component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, delete, and modify access to data, or to cause a service failure using the network...

The vulnerability of the Outside In Filters component of the Oracle Software Development Kit (SDK), as well as the Oracle Text component of the Oracle Database Server database management system, allows a malicious individual to gain access to read, delete, and modify data, or to cause a service failure.

The vulnerability of the Outside In Filters component of the Oracle Software Development Kit SDK and the Oracle Text component of the Oracle Database Server system is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain read, delete, and modi...

OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to...

OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Scripting. Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...