4559 matches found
389 Directory Server Buffer Overflow DoS
The vulnerability of the 389 Directory Server catalog service server arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Securing the Internet of Things through Class-Action Lawsuits
This law journal article discusses the role of class-action litigation to secure the Internet of Things. Basically, the article postulates that 1 market realities will produce insecure IoT devices, and 2 political failures will leave that industry unregulated. Result: insecure IoT. It proposes...
Samba Null Pointer DoS
The vulnerability of Samba software is related to the handling of the null pointer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Samba Access Control Error
The vulnerability of Samba software is related to errors in access control. Exploiting this vulnerability can allow a perpetrator to compromise data integrity and cause service failures...
Dovecot TLS Resource Exhaustion DoS
The vulnerability of the Dovecot mail server’s TLS protocol implementation is related to a configuration error. Exploiting this vulnerability could allow a malicious actor to cause service failures...
VertexBuffer11 Firefox Vulnerable
The vulnerability of the VertexBuffer11 module in the Firefox browser is related to a check error in the graphics library ANGLE. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Out Of Band, Out Of Sight, Out Of Mind
Satellite receivers aboard maritime vessels can be tricky things to manage, yet are crucial to efficient operations of modern drilling rigs and ships. Particularly on rigs, it’s not that unusual for a receiver dish to be knocked out of alignment during drilling operations. Lose satcoms and you’re...
LibVNCServer HandleRFBServerMessage Heap Buffer Overflow DoS
The vulnerability of the HandleRFBServerMessage function in the cross-platform library LibVNCServer is related to an error in defining the full screen. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service...
Firefox JNLP Error Confidential Data Compromise
The vulnerability of Firefox browsers is related to errors in the processing of executable content for applications with the .JNLP extension. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
Libvirt util virlog Heap Buffer Overflow DoS
The vulnerability of the util/virlog.c utility in the Libvirt control library is related to an error in determining the host name during container startup. Exploiting this vulnerability can allow a perpetrator to access confidential data, compromise its integrity, and cause service failures...
Firefox AssertWorkerThread Heap Buffer Overflow DoS
The vulnerability of the AssertWorkerThread function in the Firefox browser is related to a memory management error after the function’s memory is released. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...
Firefox Insufficient Validation Confidential Information Data Compromise
The vulnerability of Firefox browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
SAP Mobile Platform SDK Resource Management Error
The vulnerability of the SAP Mobile Platform SDK, a software development platform, is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures using the HTTP...
Junos PCEP DoS
The vulnerability of implementing the Path Computation Element Protocol PCEP protocol in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures using the HTTP...
Enterprise Manager Base Platform Job System Privilege Escalation
The vulnerability of the Job System component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information, or caus...
Configuration Standard Framework Component Privilege Escalation
The vulnerability of the Configuration Standard Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protecte...
Cloud Control Manager Privilege Escalation
The vulnerability of the Cloud Control Manager component – a software platform of the Enterprise Manager Base Platform – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized acces...
Enterprise Config Management Unauthorized Access
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...