The vulnerability of the Google Chrome browser’s chooser file allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the Google Chrome browser’s chooser file relates to the use of memory after it is freed during rendering. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

The vulnerability of the excludedchannels() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the excludedchannels function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the issue of data being written beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to...

The vulnerability of the calculate_gain function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes stack overflow. Exploiting this vulnerability could allow a remote attacker to compromise data integrity, gain unauthorized access to protected information, and cause...

The vulnerability of the JCE component of the Java SE software platform, which allows a hacker to trigger a service failure

The vulnerability of the JCE component of the Java SE software platform is related to lack of access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the Thunderbird email client’s libical library allows a hacker to induce a service failure.

The vulnerability of the Thunderbird email client’s libical library is related to the overflow of the icalrecuraddbydayrules stack buffer when processing certain email messages. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Thunderbird email client’s libical library lies in the lack of type checking for the objects being passed around. This allows attackers to trigger a service failure.

The vulnerability of the Thunderbird email client’s libical library is related to the lack of type checking during the processing of certain email messages. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mkv::event_thread_t() function in the VideoLAN VLC media player software allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the mkv::eventthreadt function in the VideoLAN VLC media player software is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service...

Pitney Bowes Hit with Ransomware Attack

Shipping services company Pitney Bowes was hit with a ransomware attack that disrupted customer access to key services, the company said Monday. The attack comes on the heels of an FBI advisory on Oct. 2 that U.S. companies should be on alert for ransomware attacks, which are increasing in...

Vulnerability of the Server component:locking of the Oracle MySQL Server database management system, allowing attackers to cause service interruptions.

The vulnerability of the Server component: Locking the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Vulnerability of the Server: Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Delivering Intrinsic, Intelligent and Informed Security: VMware Completes Acquisition of Carbon Black

Editor's Note: This blog also appears on VMware's Newsroom. We are delighted to announce that VMware has completed its acquisition of endpoint security leader Carbon Black. With this move, VMware is launching a new Security Business Unit under the leadership of Patrick Morley, who has led Carbon...

Partner Perspectives: Disrupt Advanced Threats with Blumira + Carbon Black

Matt Warner is the CTO of Blumira. Modern security challenges are not easy to fix or even identify, and despite misleading advertising from some vendors, there is no one-size-fits-all solution. Blumira frequently observes large visibility gaps in existing security implementations, allowing obviou...

The vulnerability of the RADIUS Change of Authorization (CoA) function in the Cisco TrustSec network security management system allows a perpetrator to trigger a service failure.

The vulnerability of the RADIUS Change of Authorization CoA function in the Cisco TrustSec network security system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

The vulnerability of the InnoDB component of the MySQL Server database management system allows a attacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Server database management system is related to the improper release of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the InnoDB component in the MySQL Server database management system allows a attacker to cause service interruptions.

The vulnerability of the InnoDB component in the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the fly-admin-ftp component in the FLY operating environment of the Astra Linux system, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the ftp fly-admin-ftp component in the FLY operating environment of the Astra Linux system is related to the absence of changes in the access parameters for the root user directory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the m_cat function in the QEMU hardware emulation software allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the mcat function in the QEMU hardware emulation software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

The vulnerability of the fly-admin-local-se component in the FLY operating system of the Astra Linux platform allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the fly-admin-local-se component in the FLY operating system of Astra Linux is related to logging errors when changing user privileges, as well as errors in creating rules for devices with the same name. Exploiting this vulnerability can allow attackers to compromise data...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to the reutilization of dynamic memory after it is freed by a “trash collector”. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protecte...