CVE-2020-1466

A denial of service vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RD Gateway service on the target system to...

A Cyberattack on Garmin Disrupted More Than Workouts

A ransomware hit and subsequent outage caused problems in the company’s aviation services, including flight planning and mapping...

Denial of Service Vulnerability in gbase 8a at Tianjin Nanda General Data Technology Co. Ltd (CNVD-2020-48799)

GBase 8a is a secure database management system. A denial of service vulnerability exists in gbase 8a of Tianjin Nanda General Data Technology Co. Ltd. that can be exploited by an attacker to cause a denial of service of the database...

Smartwatch Maker Garmin Shuts Down Services After Ransomware Attack

Garmin, the maker of fitness trackers, smartwatches and GPS-based wearable devices, is currently dealing with a massive worldwide service interruption after getting hit by a targeted ransomware attack, an employee of the company told The Hacker News on condition of anonymity. The company's websit...

Smartwatch Maker Garmin Shuts Down Services After Ransomware Attack

Garmin, the maker of fitness trackers, smartwatches and GPS-based wearable devices, is currently dealing with a massive worldwide service interruption after getting hit by a targeted ransomware attack, an employee of the company told The Hacker News on condition of anonymity. The company's websit...

UPDATED: Garmin Suffers Reported Ransomware Attack

Garmin, maker of fitness trackers, smartwatches and GPS-related products, has reportedly suffered a widespread ransomware attack — though the facts around the cause remain unconfirmed for now. The manufacturer tweeted on Thursday that its Garmin Connect service is down; Garmin is a free app for...

The vulnerability of the asn1_d2i_read_bio function (crypto/asn1/a_d2i_fp.c) in the OpenSSL library allows a attacker to cause a service failure.

The vulnerability of the asn1d2ireadbio function crypto/asn1/ad2ifp.c in the OpenSSL library is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Server:Optimizer component of the Oracle MySQL Server database management system allows a hacker to cause a service failure.

The vulnerability of the Server:Optimizer component of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

Yokogawa Centum Out-of-bounds Write

Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...

OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to...

The vulnerability of the GraphicsMagick graphic editor, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the GraphicsMagick graphic editor is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions using a specially created xwd file...

Enable Local Host Cache with Citrix Cloud

During network outage, Local Host Cache LHC not toggling in Cloud environment...

OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Concurrency. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multipl...

UBUNTU-CVE-2020-2755

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Scripting. Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

Denial Of Service (DoS)

XScreenSaver is vulnerable Denial of Service DoS. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen...

The vulnerability of the UDP protocol in the Siemens SIMATIC TDC CP51M1 communication module allows a intruder to cause a service failure.

The vulnerability of the UDP protocol in the Siemens SIMATIC TDC CP51M1 communication module is related to insufficient data validation during the processing of UDP traffic. Exploiting this vulnerability allows a malicious actor to cause service failures by using specially created UDP packets...

Sensio Labs Symfony Input Validation Error Vulnerability

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security vulnerability exists in Sensio Labs Symfony...

CVE-2019-13967

iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service application outage via many requests to launch a compile operation. The requests use the pages/exec.php?execenv=production&execmodule=itop-hub-connector&execpage=ajax.php&operation=compile URI. This only affects the...

CVE-2019-13967

iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service application outage via many requests to launch a compile operation. The requests use the pages/exec.php?execenv=production&execmodule=itop-hub-connector&execpage=ajax.php&operation=compile URI. This only affects the...

Design/Logic Flaw

iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service application outage via many requests to launch a compile operation. The requests use the pages/exec.php?execenv=production&execmodule=itop-hub-connector&execpage=ajax.php&operation=compile URI. This only affects the...