Rockwellautomation Flex Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious...

Oracle FLEXCUBE Universal Banking has an unspecified vulnerability (CNVD-2021-54692)

An unspecified vulnerability exists in the Flex-Branch component of Oracle FLEXCUBE Universal Banking, a real-time, online, comprehensive global core banking solution that covers retail, corporate, and investment banking. An attacker could exploit this vulnerability to compromise confidentiality...

Oracle Financial Services Applications安全漏洞

An unspecified vulnerability exists in the Flex-Branch component of Oracle FLEXCUBE Universal Banking, a real-time, online, comprehensive global core banking solution that covers retail, corporate, and investment banking. An attacker could exploit this vulnerability to compromise confidentiality...

PT-2021-7178

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 12.3 through 12.4 Oracle FLEXCUBE Universal Banking versions 14.0 through 14.4 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE...

CVE-2021-2323: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Flex-Branch. Supported versions that are affected are 12.3, 12.4, 14.0-14.4 and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2021-35029

An authentication bypasss vulnerability in the web-based management interface of Zyxel USG/Zywall series firmware versions 4.35 through 4.64 and USG Flex, ATP, and VPN series firmware versions 4.35 through 5.01, which could allow a remote attacker to execute arbitrary commands on an affected devi...

Fired by algorithm: The future’s here and it’s a robot wearing a white collar

Black Mirror meets 1984. Imagine that your employer uses a bot to keep track of your “production level.” And when this bot finds that you are an under-performer it fires off a contract-termination mail. Does this sound like the world you live in? Unfortunately, for some people it is. The case...

CVE-2021-33818

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

CVE-2021-33818

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

CVE-2021-33820

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

CVE-2021-33820

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

CVE-2021-33818

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

Denial of service

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

CVE-2021-33818

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service...

CVE-2021-33818

CVE-2021-33818 affects UniFi Protect G3 FLEX Camera (UVC.v4.30.0.67). The issue is triggered by attackers using the slowhttptest tool to send incomplete HTTP requests, causing the web server to wait for packet completion and exhaust resources, resulting in denial of service. Affected component is...

CVE-2021-33820

CVE-2021-33820 affects UniFi Protect G3 FLEX Camera, version UVC.v4.30.0.67. The advisory states that an attacker can send a large number of TCP SYN packets to exhaust web service resources, causing a denial-of-service. No affected vendor/product family other than the UniFi Protect G3 FLEX camera...

CVE-2021-33820

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...

PT-2021-20334

Name of the Vulnerable Software and Affected Versions: UniFi Protect G3 FLEX Camera version UVC.v4.30.0.67 Description: An issue was discovered where an attacker could send a large amount of TCP SYN packets to exhaust the web service's resources, resulting in a denial-of-service. Recommendations:...

Ubiquiti Networks UniFi Protect 资源管理错误漏洞

Ubiquiti Networks UniFi Protect is a network video recorder from Ubiquiti Networks, Inc. A resource management error vulnerability exists in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67, which can be exploited by an attacker to cause a denial of service to a web server by sending a large...

CVE-2021-33820: Undefined Security Weakness

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service...