1175 matches found
CVE-2019-13967
The CVE applies to iTop versions 2.2.0 through 2.6.0 (community edition). An attacker can trigger a denial of service by sending many requests to launch a compile operation via the URI pages/exec.php?exec_env=production&exec_module=itop-hub-connector&exec_page=ajax.php&operation=compile. The issu...
The vulnerability of the Console component of Oracle WebLogic Server allows a attacker to cause a partial service failure.
The vulnerability of the Console component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a partial service outage using the HTTP protocol...
Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause a service failure.
Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Stack overflow
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...
CVE-2015-5627
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...
The vulnerability of the rds_tcp_kill_sock() function in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the rdstcpkillsock function in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2020-2633
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2630
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Extensibility Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2558
Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris,...
Cut Undersea Cable Plunges Yemen Into Days-Long Internet Outage
The fragility of global internet infrastructure has left the entire Red Sea region struggling to connect...
OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JAXP. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
The vulnerability of the decompileSETTARGET function in the libming library for creating Adobe Flash files allows a hacker to cause a service failure.
The vulnerability of the decompileSETTARGET function in the libming library for creating Adobe Flash files is related to a data processing error when there is a mismatch in data sizes. Exploiting this vulnerability could allow an attacker to cause service interruptions...
OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
The vulnerability of the real_sdpplin.c component in the VideoLAN VLC media player software allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the realsdpplin.c component in the VideoLAN VLC media player lies in buffer overflows in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code using the SDP protocol...
The vulnerability of the fill_threshhold_buffer function (base/gxht_thresh.c) in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to execute arbitrary code or cause service interruptions.
The vulnerability of the fillthreshholdbuffer function in the software suite for processing, transforming, and generating Ghostscript documents is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute...
The vulnerability of the LDAP library in the Solaris operating system, which allows a hacker to cause a partial service failure
The vulnerability of the LDAP library in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a partial service outage...
CVE-2019-17532
An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...
CVE-2019-17532
An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...
An illegal prostitution ring took Kazakhstan offline
By Sudais On 31st July 2019, internet users within Kazakhstan experienced a show of dismay unseen before. Suddenly, hundreds of website could not be accessed. This is a post from HackRead.com Read the original post: An illegal prostitution ring took Kazakhstan offline...