CVE-2021-21391

CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office, and ckeditor5-widget. Following an internal audit, a regular...

CVE-2021-21391

Removed by vendor...

Experian’s Credit Freeze Security is Still a Joke

In 2017, KrebsOnSecurity showed how easy it is for identity thieves to undo a consumers request to freeze their credit file at Experian, one of the big three consumer credit bureaus in the United States. Last week, KrebsOnSecurity heard from a reader who had his freeze thawed without authorizatio...

Regular expression Denial of Service in multiple packages

Impact A regular expression denial of service ReDoS vulnerability has been discovered in multiple CKEditor 5 packages. The vulnerability allowed to abuse particular regular expressions, which could cause a significant performance drop resulting in a browser tab freeze. It affects all users using...

Trend Micro Virus Scan API Denial of Service Vulnerability

Trend Micro Virus Scan is an application from the Chinese company Trend Micro Trend. It provides a virus scanning function. The Trend Micro Virus Scan API has a security vulnerability that can be exploited by attackers using specially crafted files that may result in a denial of service or system...

CVE-2021-25252

Trend Micro's Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file...

Memory corruption

Trend Micro's Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file...

CVE-2021-25252

Trend Micro's Virus Scan API VSAPI and Advanced Threat Scan Engine ATSE - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file...

Regular Expression Denial of Service

Overview In affected versions of @ckeditor/ckeditor5-markdown-gfm a regular expression denial of service ReDoS vulnerability has been discovered. Impact The vulnerability allowed to abuse a link recognition regular expression, which could cause a significant performance drop resulting in a browse...

Edge Redirector Cloudlet Gets Faster

Cloudlets Policy Manager often takes a long time to load, which is a by-product of its original design where every policy activation is an individual file. These files must be moved around the network, and as you might imagine, transferring thousands of files in a multi-tenant network can take a...

CVE-2021-21254

CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin @ckeditor/ckeditor5-markdown-gfm before version 25.0.0 has a regex denial of service ReDoS vulnerability. The vulnerability allowed to abuse link recognition regular expression, whi...

CVE-2021-21254 Regular expression Denial of Service in Markdown plugin

CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin @ckeditor/ckeditor5-markdown-gfm before version 25.0.0 has a regex denial of service ReDoS vulnerability. The vulnerability allowed to abuse link recognition regular expression, whi...

PT-2021-14364 · Ckeditor · Ckeditor 5 Markdown Plugin

Name of the Vulnerable Software and Affected Versions: CKEditor 5 Markdown plugin versions prior to 25.0.0 Description: The CKEditor 5 Markdown plugin has a regex denial of service ReDoS vulnerability. This vulnerability allows the abuse of link recognition regular expressions, which could cause ...

CKEditor Resource Management Error Vulnerability

CKEditor is an open source, web-based text editor. A resource management error vulnerability exists in CKEditor 5 that allows misuse of link-recognizing regular expressions to cause the browser tab to freeze. The following products and versions are affected: CKEditor 5 Markdown plugin at version ...

Design/Logic Flaw

Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub and it will stop responding. The "hub" will stop operating and be frozen until the flood stops. During the flood, the user won't be able to turn on/off the lights, and all of...

Philips Hue Resource Management Error Vulnerability

Philips Hue is a smart lighting device from the Chinese company Philips. A security vulnerability exists in Philips Hue, the vulnerability stems from a SYN flood sent on tcp port 80 will freeze the Philips Hue's hub and it will stop responding...

Unable to boot the target device when vDisk is not replicated to all the Provisioning Service servers

The target device fails to startwhen vDisk is not replicated across all the servers. The target device freezesat "connecting to provisioning services"...

USN-4667-1 apt vulnerability

Kevin Backhouse discovered that APT incorrectly handled certain packages. A local attacker could possibly use this issue to cause APT to crash or stop responding, resulting in a denial of service...

SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2020:3568-1)

This update for mutt fixes the following issues : CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 Note that Tenable Network Securi...

openSUSE Security Update : mutt (openSUSE-2020-2141)

This update for mutt fixes the following issues : - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 This update was imported fro...