The vulnerability of the wpa_supplicant component of the EAP-PWD protocol in wireless communication devices certified by WPA allows a perpetrator to compromise the integrity and confidentiality of data or cause service failures due to improper use of privileges.

The vulnerability of the wpasupplicant component of the EAP-PWD protocol in wireless communication devices certified by WPA is related to incorrect validation of scalar values and values of elements in the “EAP-pwd-Commit” section of imported elements. Exploiting this vulnerability allows a...

The vulnerability of the command-line interface implementation of the network operating system NX-OS allows a attacker to re-write any file in the file system and cause service failure.

The vulnerability of the command-line interface implementation of the NX-OS network operating system exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to overwrite any file in the file system and cause service failure...

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco NX-OS and Cisco FX-OS systems allows a attacker to induce a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco NX-OS and Cisco FX-OS systems is related to improper error handling. Exploiting this vulnerability allows an attacker to repeatedly restart the application and cause service failures...

CVE-2019-12195

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...

The vulnerability of the McAfee Agent client component, caused by an operation going beyond the buffer in memory, allows a perpetrator to trigger a service failure.

The vulnerability of the McAfee Agent client component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted UDP packets remotely...

4 lessons to be learned from the DOE’s DDoS attack

Analysts, researchers, industry professionals, and pundits alike have all posited the dangers of the next-generation “smart grid,” particularly when it comes to cybersecurity. They warn that without the right measures in place, unscrupulous parties could essentially wreak havoc on the bulk of...

Authorization Bypass

Linux kernel is vulnerable to authorization bypass attacks. This exists in the tmpfs and hugetlbfs files. An attacker is able to bypass file permissions on filesystems mounted with tmpfs/hugetlbs to modify a file and possibly disrupt normal system behavior...

Siemens’ software vulnerabilities, related to insufficient validation of input data, allow attackers to trigger service failures.

The vulnerability of Siemens’ software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted network packets to port 4840/TCP...

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower 2100 microprogramming-based network interface controllers lies in the improper processing of IPsec sessions by the software cryptographic module. This allows attackers to cause service interruptions.

The vulnerability of Cisco Adaptive Security Appliance and Cisco Firepower 2100 network interface controllers lies in the improper handling of IPsec sessions by the software cryptographic module. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform allows a hacker to trigger a service failure.

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform is related to errors in processing external XML objects during the analysis of XML files XXE. Exploiting this vulnerability allows a malicious actor to cause service failures by using a specially...

(Vulnerability) The vulnerability of the binary system for storing service information via systemd-journald, caused by operations that go beyond the buffer in memory, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the systemd-journald binary storage system of service information arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure...

CVE-2019-1694 Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...

Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software TCP Timer Handling Denial of Service Vulnerability

A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability i...

CVE-2019-11608

doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information or make the server unserviceable...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the Server component: Security: Privileges of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: Security: Privileges of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability may allow a malicious actor to cause service interruptions using the MySQL protocol...

Vulnerability of the Server: Group Replication Plugin component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Group Replication Plugin component of the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the InnoDB component of the MySQL database management system, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the MySQL protocol...

The vulnerability of the Siebel Core component – the Server BizLogic Script of the Siebel CRM system’s customer relationship management module – allows an attacker to access, modify, add, or delete data, and to cause a partial service disruption.

The vulnerability of the Siebel Core component – the Server BizLogic Script of the Siebel CRM system’s customer relationship management software – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, and...

The vulnerability of the BGP component implementation in the Junos OS operating system allows a attacker to cause a service failure.

The vulnerability of the BGP component implementation in the Junos OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...