WordPress WPGraphQL 1.3.5 Denial Of Service

Exploit Title: WordPress Plugin WPGraphQL 1.3.5 - Denial of Service Author: Dolev Farhi Date: 2021-04-12 Vendor Homepage: https://www.wpgraphql.com/ Version: 1.3.5 Tested on: Ubuntu """ This attack uses duplication of fields amplified by GraphQL batched queries, resulting in server OOM and MySQL...

WPGraphQL < 1.3.6 - Denial of Service

The plugin suffers from a Denial of Service vulnerability by Field Duplication. It is possible to create an expensive query by duplicating the number of fields, while simultaneously sending these requests in batches using GraphQL's Batching capability. v1.3.6 added a setting to disable batch...

Security update for nim (moderate)

openSUSE Security Update: Security update for nim Announcement ID: openSUSE-SU-2021:0618-1 Rating: moderate References: 1185083 1185084 1185085 Cross-References: CVE-2021-21372 CVE-2021-21373 CVE-2021-21374 CVSS scores: CVE-2021-21374 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affecte...

OPENSUSE-SU-2021:0598-1 Security update for shim

This update for shim fixes the following issues: - Updated openSUSE x86 signature - Avoid the error message during linux system boot boo1184454 - Prevent the build id being added to the binary. That can cause issues with the signature Update to 15.4 boo1182057 + Rename the SBAT variable and fix t...

The vulnerability of the Windows Speech Runtime component of the Windows operating system, which allows attackers to exploit their privileges

The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves privilege management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability affects components of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud, Kaspersky Small Office Security, and Kaspersky Endpoint Security for Windows. This vulnerability allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of components such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud, Kaspersky Small Office Security, and Kaspersky Endpoint Security for Windows relates to errors in permission and privilege management. Exploiting this...

PT-2021-30915

Уязвимость среды выполнения Visual Basic Runtime программных продуктов Yokogawa связана с ошибками управления привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

Citrix Receiver Does Not Respond When Opening Applications to XenApp Servers

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When opening applications to XenApp servers, there is no response at the Launching… prompt, as shown...

PT-2021-2863 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to errors in the authorization procedure of the Cisco SD-WAN vManage web interface. It allows a remote attacker to gain unauthorized access to...

The vulnerability of DNS clients, related to errors in randomizing transaction identifiers during DNS queries, allows attackers to compromise data integrity.

The vulnerability of the DNS client is related to errors during the randomization of DNS transaction identifiers. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the Unity-firefox-extension package in the Ubuntu operating system allows a hacker to trigger a service failure.

The vulnerability of the Unity-firefox-extension package in the Ubuntu operating system is related to resource release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Unity-firefox-extension package in the Ubuntu operating system allows a hacker to trigger a service failure.

The vulnerability of the Unity-firefox-extension package in the Ubuntu operating system is related to resource release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the implementation of the Microsoft Server Message Block (SMB) network protocol on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the User Mode Driver (UMD) of the Linux kernel, which allows a hacker to trigger a service failure

The vulnerability of the User Mode Driver UMD of the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Windows Speech Runtime component in Microsoft Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Runtime component in Microsoft Windows systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2021-6930 · Elcomplus · Elcomplus Smartptt

Name of the Vulnerable Software and Affected Versions: Elcomplus SmartPTT affected versions not specified Description: The issue is related to authorization errors in the Elcomplus SmartPTT scada-server, allowing a low-authenticated user to access higher-level administration authorization. This c...

The vulnerability of the netfilter subsystem in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the netfilter subsystem in the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...