The vulnerability of the Microsoft Office Web Apps, Microsoft Word, Word Viewer, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Microsoft Office packages allows a perpetrator to cause service interruptions.

The vulnerabilities of the Microsoft Office Web Apps, Microsoft Word, Word Viewer, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Microsoft Office arise from operations that occur outside of the buffer in memory. Exploitation of these vulnerabilities can allow a malicious...

Oracle Retail Invoice Matching Information Disclosure Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation, of which Oracle Retail Invoice Matching is a component with retail invoice amount matching functionality, and Security is a security subcomponent. An information disclosure vulnerability exists i...

The vulnerability of the xdr_bytes and xdr_string functions in the library that handles system calls and core glibc functions allows a attacker to cause a service failure.

The vulnerabilities of the xdrbytes and xdrstring functions in the library that handles system calls and core glibc functions are related to the reclamation of unreliable data stored in memory after deserialization of buffers. Exploiting these vulnerabilities allows a remote attacker to cause a...

The vulnerability of the Remote Administration Daemon component of the Solaris operating system allows a perpetrator to gain access to read or modify data, thereby causing a partial service disruption.

The vulnerability of the Remote Administration Daemon component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, and cause partial service interruption...

The vulnerability of the sctp_sf_ootb function in the Linux operating system allows a hacker to cause a service failure or exert other effects.

The vulnerability of the sctpsfootb function in the Linux kernel’s net/sctp/smstatefuns.c file allows for data to be read beyond the specified buffer. Exploiting this vulnerability can enable a malicious actor to cause service failures or exert other effects using specially crafted SCTP data...

The vulnerabilities of PDF viewing and editing programs such as Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to cause service failures or execute arbitrary codes.

The vulnerability of PDF viewing and editing programs such as Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat arises from operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code or cause a service failure...

Internet Bug Bounty: rpcbind "rpcbomb" CVE-2017-8779, CVE-2017-8804

Description: this allowed an attacker to easily disrupt a remote system through excessive memory consumption. Writeup: https://guidovranken.wordpress.com/2017/05/03/rpcbomb-remote-rpcbind-denial-of-service-patches/ Demonstration video: https://www.youtube.com/watch?v=b38H3oEgrQw this video shows...

Zimbra Collaboration Suite (ZCS) Directory Traversal Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A directory traversal vulnerability exists in Zimbra Collaboration Suite ZCS, which could be exploited by an attacker to compromise the confidentiality, availability, or integrity of the...

F5 BIG-IP - TMM vulnerability CVE-2017-6137

Undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disruption of service to the Traffic Management Microkernel TMM on specific platforms and configurations. CVE-2017-6137 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...

SAP Business One for Android XML External Entity Injection Vulnerability

SAP Business One for Android is a mobile application tailored for Android. An XML external entity injection vulnerability exists in SAP Business One for Android. An attacker could exploit this vulnerability to gain access to sensitive information or cause a denial of service...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2017-07721)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

IBM Distributed Marketing Input Validation Vulnerability

IBM Distributed Marketing is an omni-channel marketing solution from IBM USA. The solution is used to create, monitor and measure field marketing programs. An input validation vulnerability exists in IBM Distributed Marketing. An attacker could exploit the vulnerability to create instances, causi...

The vulnerability in the drivers/regulator/core.c component of the Android operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the regulatorenagpiofree function in the drivers/regulator/core.c component of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause a service failure the...

Juniper Networks NorthStar Controller Application Denial of Service Vulnerability (CNVD-2017-07225)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A denial of service vulnerability exists in Juniper Networks NorthStar...

The vulnerability of the Cisco IOS operating system’s DHCP client implementation allows a attacker to trigger a service failure or cause a device to restart.

The vulnerability of the Cisco IOS operating system’s DHCP client implementation is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures or trigger a device restart using specially crafted DHCP packets...

F5 BIG-IP - TMM vulnerability CVE-2016-9247

Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel TMM to restart. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...

F5 BIG-IP - TMM vulnerability CVE-2017-0302

Insufficient boundary checks on the request URL may cause the tmm process to assert when the user is redirected back to the original request URL following successful authentication to the BIG-IP APM system.CVE-2017-0302 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...

F5 BIG-IP - TMM vulnerability CVE-2016-9253

Specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile. CVE-2016-9253 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

What’s Next for Ransomware: Data Corruption, Exfiltration and Disruption

Ransomware’s popularity continues to skyrocket, due to its successful business model and the significant profit paid by its victims. Unlike other malware business models – where attackers steal data and then sell it on the darknet; hackers who utilize ransomware as their attack vector receive...

The vulnerability of the Oracle MySQL database management system allows a hacker to gain privileged access and cause service interruptions.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain privileged access and cause the system to become unstable or crash using network packets...