1477 matches found
CVE-2019-13967
iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service application outage via many requests to launch a compile operation. The requests use the pages/exec.php?execenv=production&execmodule=itop-hub-connector&execpage=ajax.php&operation=compile URI. This only affects the...
Oracle WebLogic Server Console Partial DoS
The vulnerability of the Console component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a partial service outage using the HTTP protocol...
Server MySQL DoS
Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Stack overflow
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...
CVE-2015-5627
Stack-based buffer overflow in Yokogawa CENTUM CS 1000 R3.08.70 and earlier, CENTUM CS 3000 R3.09.50 and earlier, CENTUM CS 3000 Entry R3.09.50 and earlier, CENTUM VP R5.04.20 and earlier, CENTUM VP Entry R5.04.20 and earlier, ProSafe-RS R3.02.10 and earlier, Exaopc R3.72.00 and earlier, Exaquant...
Linux rds_tcp_kill_sock DoS
The vulnerability of the rdstcpkillsock function in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2020-2630
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Extensibility Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2633
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Connector Framework. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2020-2558
Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris,...
Cut Undersea Cable Plunges Yemen Into Days-Long Internet Outage
The fragility of global internet infrastructure has left the entire Red Sea region struggling to connect...
OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JAXP. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
libming Heap Buffer Overflow DoS
The vulnerability of the decompileSETTARGET function in the libming library for creating Adobe Flash files is related to a data processing error when there is a mismatch in data sizes. Exploiting this vulnerability could allow an attacker to cause service interruptions...
OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
Ghostscript fill_threshhold_buffer Heap Buffer Overflow DoS
The vulnerability of the fillthreshholdbuffer function in the software suite for processing, transforming, and generating Ghostscript documents is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute...
VLC media player real_sdpplin.c Heap Buffer Overflow DoS
The vulnerability of the realsdpplin.c component in the VideoLAN VLC media player lies in buffer overflows in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code using the SDP protocol...
Solaris LDAP Partial DoS
The vulnerability of the LDAP library in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a partial service outage...
CVE-2019-17532
An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...
CVE-2019-17532
An issue was discovered on Belkin Wemo Switch 28B WW2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service persistent rules-processing outage via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption...
An illegal prostitution ring took Kazakhstan offline
By Sudais On 31st July 2019, internet users within Kazakhstan experienced a show of dismay unseen before. Suddenly, hundreds of website could not be accessed. This is a post from HackRead.com Read the original post: An illegal prostitution ring took Kazakhstan offline...