2019 matches found
CVE-2020-35213
CVE-2020-35213 affects Atomix v3.1.5 and enables a denial of service by sending false link event messages to the master ONOS node. The description across connected sources consistently cites a DoS impact with high severity (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is descri...
CVE-2020-35216: Concurrent Execution using Shared Resource with Improper Synchronization
An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...
Atomix 竞争条件问题漏洞
Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. A denial-of-service vulnerability exists in Atomix version 3.1.5. An attacker could exploit this vulnerability to cause a denial of service via a false member shutdown event message...
CVE-2020-35213: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false link event messages sent to a master ONOS node...
Atomix 注入漏洞
Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. A denial-of-service vulnerability exists in Atomix version 3.1.5. An attacker could exploit this vulnerability to cause a denial of service via a false link event message sent to the primary ONOS node...
How Extended Security Posture Management Optimizes Your Security Stack
As a CISO, one of the most challenging questions to answer is "How well are we protected right now?" Between the acceleration of hackers' offensive capabilities and the dynamic nature of information networks, a drift in the security posture is unavoidable and needs to be continuously compensated...
CVE-2021-44228: Apache Log4j2 Zero-Day Exploited in the Wild (Log4Shell)
Update Take advantage of our free service to quickly detect vulnerabilities in your external attack surface. Visit qualys.com/was-log4shell-help to get started. Update – December 22, 2021 7:53 PM ET A bug in external scanners could result in false negatives when unauthenticated Log4Shell scans we...
Omicron Phishing Scam Already Spotted in UK
The global pandemic has provided cover for all sorts of phishing scams over the past couple of years, and the rise in alarm over the spread of the latest COVID-19 variant, Omicron, is no exception. As public health professionals across the globe grapple with what they fear could be an even more...
PT-2022-11908 · Odyssey +1 · Odyssey +1
Name of the Vulnerable Software and Affected Versions: Odyssey affected versions not specified Description: The issue allows a man-in-the-middle attacker to inject false responses to the client's initial queries when Odyssey storage is configured to use the PostgreSQL server with specific...
Backdoor.Win32.BlueAdept.02.a Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/694d21679cc212c59515584d1b65dc84.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.BlueAdept.02.a Vulnerability: Remote Buffer Overflow Description: The malware listens...
python-ecdsa: DER encoding is not being verified in signatures
A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false...
The vulnerability of Yokogawa’s software products stems from lack of access control mechanisms. This allows attackers to generate false system or technological alarm signals, or block existing alarm signals.
The vulnerability of Yokogawa’s software products is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to generate false system or technological alarm signals, or block existing alarm signals...
Incorrect Accrual Of sumNative and sumUSD In Producing Consultation Results
Handle leastwood Vulnerability details Vulnerability details Impact The TwapOracle.consult function iterates over all token pairs which belong to either VADER or USDV and then calculates the price of the respective asset by using both UniswapV2 and Chainlink price data. This helps to further...
Incorrect Price Consultation Results
Handle leastwood Vulnerability details Impact The TwapOracle.consult function iterates over all token pairs which belong to either VADER or USDV and then calculates the price of the respective asset by using both UniswapV2 and Chainlink price data. This helps to further protect against price...
CVE-2021-23222
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption...
Ubuntu 18.04 LTS / 20.04 LTS : PostgreSQL vulnerabilities (USN-5145-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5145-1 advisory. Jacob Champion discovered that PostgreSQL incorrectly handled SSL certificate verification and encryption. A remote attacker could possibly u...
CVE-2021-23222
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption...
UBUNTU-CVE-2021-23222
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption...
The FP Paradox on the battlefield against COVID-19 and cyber threats
Lets consider for a moment the “next” communicable virus. You show no symptoms but you try a home testing kit anyway, expecting the result to be negative. To your great surprise, the result is positive! The information enclosed in the testing kit package explained that the test results are nearly...
Backdoor.Win32.LanaFTP.k Heap Corruption
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e2660742a80433e027ee9bdedc40e190.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.LanaFTP.k Vulnerability: Heap Corruption Description: The malware listens on TCP port...