The vulnerability of the mod_ssl module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modssl module in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted request for re-negotiation of the TLS connection...

The vulnerability of the Load Testing component in the Oracle Application Testing Suite, which is used for testing web applications, web services, and databases, allows a hacker to gain access to protected information, alter file access rights, or cause partial service disruption.

The vulnerability of the Load Testing component in the Oracle Application Testing Suite, which is used for testing web applications, web services, and databases, relates to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

The vulnerability of the Level 3 Maintenance Functions component of the Oracle Retail Convenience Store Back Office software allows a perpetrator to gain access to protected information, alter file access rights, or cause partial service interruption.

The vulnerability of the Level 3 Maintenance Functions component of Oracle Retail Convenience Store Back Office software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information, modify file access rights, or cause...

The vulnerability of the configuration utility in the Cisco IMC software for remote server management, which allows a attacker to execute arbitrary commands with root privileges or cause service interruptions.

The vulnerability of the configuration tool of the Cisco IMC software for remote server management by Cisco Integrated Management Controller arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

The vulnerability of the web server of the Cisco Integrated Management Controller, a software-based remote management system for servers, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions through a specially crafted HTTP request...

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and the Node.js software platform. This allows attackers to induce service failures.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, Apache Traffic Server web servers, H2O web servers, network programming tools such as netty, SwiftNIO, Envoy, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting...

The vulnerability relates to the implementation of the HTTP/2 network protocol on Windows operating systems, Apache Traffic Server web servers, network software such as Envoy, and Node.js software platforms. This allows attackers to induce service interruptions.

The vulnerability of the HTTP/2 network protocol implementation in Windows operating systems, Apache Traffic Server web servers, networking software like Envoy, and Node.js software platforms is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious...

The vulnerability of the server process svnserve in the centralized version control system Subversion allows a perpetrator to cause a service failure.

The vulnerability of the server process svnserve in the Subversion version control system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the `defaults` function in the Lodash library allows a attacker to trigger a service failure, execute arbitrary JavaScript code, or increase their privileges.

The vulnerability of the defaults function in the Lodash library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures, execute arbitrary JavaScript code, or enhance their privileges...

The vulnerability of the onSubmit() method of the Horde_Form_Type_image class (Horde/Form/Type.php) in the php-horde-form functionality allows a attacker to compromise data integrity, gain access to confidential data, and cause service interruptions.

The vulnerability of the onSubmit method in the HordeFormTypeimage class Horde/Form/Type.php of the php-horde-form functionality package is related to incorrect elimination of special characters in the POST parameter. This can lead to incorrect restrictions on the path to a restricted directory...

The vulnerability of the mwifiex_update_bss_desc_with_ie function in Linux kernel allows a hacker to escalate their privileges, cause service failures, or execute arbitrary code.

The vulnerability of the mwifiexupdatebssdescwithie function in the Linux kernel’s marvell/mwifiex/scan.c file arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges, cause service failures, or...

The vulnerability in the implementation of the HTTP/2 protocol for Firefox ESR, Firefox, and the Thunderbird email client allows a attacker to cause a service failure.

The vulnerability in the implementation of the HTTP/2 protocol in Firefox ESR browsers, Firefox browsers, and the Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the ulaw2linear_buf function in the audio file library allows a perpetrator to cause a service failure.

The vulnerability of the ulaw2linearbuf function in the Audio File Library library is related to pointer manipulation errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

The vulnerability of the DOSBox emulator, related to the execution of operations beyond the buffer boundaries in memory, allows a perpetrator to compromise data integrity, gain access to confidential information, and cause service failures.

The vulnerability of the DOSBox emulator is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise data integrity, gain access to confidential information, and cause service failures...

The vulnerability of the `tokenUseGlobalStorage` function in the authentication system for web applications in LemonLDAP::NG allows a attacker to compromise data integrity, gain access to confidential data, and cause service interruptions.

The vulnerability of the tokenUseGlobalStorage function in the authentication system for web applications in LemonLDAP::NG is related to insufficient token session verification. Exploiting this vulnerability could allow a malicious actor to compromise data integrity, gain access to confidential...

The vulnerability of the `startread` function in the `libsox.a` library of the Sound Exchange (SoX) editor allows a attacker to cause a service failure.

The vulnerability of the startread function in sox-fmt.h of the libsox.a library, a part of the Sound Exchange SoX audio editor, is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The 4 Types of Attackers and Their Motives

This post is an excerpt from The Ultimate Cybersecurity Guide for the IT Professional. Attackers + Their Motives Today’s organizations face four main categories of adversaries. In order to fully defend against these four types, you must also understand what motivates them. This context will best...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

CVE-2019-5280

The SIP TLS module of Huawei CloudLink Phone 7900 with V600R019C10 has a TLS certificate verification vulnerability. Due to insufficient verification of specific parameters of the TLS server certificate, attackers can perform man-in-the-middle attacks, leading to the affected phones registered...