Serialization Component DoS

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Smart View Provider Component Unauthorized Access

The vulnerability of the Smart View Provider component of the Hyperion Analytic Provider Services software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information, modify, add,...

WordPress Pushes Out Multiple Flawed Security Updates

The day after WordPress pushed out a critical 5.5.2 security update, patching a remote code execution bug and nine additional flaws, it was forced push out a second update and then a third 5.5.3 update. The hiccup is tied to the WordPress auto-update feature that accidentally started sending 455...

Rack Uncontrolled Resource Consumption

The vulnerability of the Ruby interpreter’s Rack module is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to specially crafted requests...

Oracle REST Data Services General Component jQuery Unauthorized Access

The vulnerability of the General component jQuery in the Oracle REST Data Services data service is related to security mechanism failures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information via the HTTP network...

Apache Tomcat DoS

The vulnerability of the Apache Tomcat application server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

VMware VMCI Drivers System Failure

The vulnerability of VMCI drivers in hypervisor graphics of VMware ESXi, VMware Workstation, and VMware Fusion is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a attacker to cause service failures...

Django: Incorrect HTTP detection with reverse-proxy connecting via HTTPS

An HTTP detection flaw was discovered in Django. If deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme incorrectly detected client requests made using HTTP as using HTTPS. This resulted in incorrect results for issecure and buildabsoluteuri, and HTTP...

Pointer Activation DoS

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the exploitation of a faulty pointer. Exploiting this vulnerability can allow attackers to cause service failures...

access control DoS

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service failures...

server boards DoS

Vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Intel processor BIOS Heap Buffer Overflow DoS

The vulnerability of Intel processor BIOS microprogramming software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause system failures...

Intel processor BIOS Privilege Management Error

The vulnerability of Intel processor BIOS microprogramming software is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Intel processor BIOS Buffer Overflow Privilege Escalation

The vulnerability of Intel processor BIOS microprogramming software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause system failures...

MBTCPTool.dll DoS

The vulnerability of the MBTCPTool.dll library in the Modbus-server “ICPDAS OPC2MBTCP” of the industrial controller XP-8741-Atom is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

XACK DNS Server DoS

The vulnerability of the XACK DNS server stems from an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

Cisco AnyConnect Secure Mobility Client Process Interaction DoS

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client encryption protection tool is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

StarOS IPv6 DoS

The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco IOS XE DoS

The vulnerability of the Cisco IOS XE operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Cisco IOS XE DoS

The vulnerability of the IP Service Level Agreement SLA component of the Cisco IOS XE operating system is related to state management errors. Exploiting this vulnerability may allow remote attackers to trigger service failures...