Vulnerability of the Server component: The Data Dictionary of the MySQL Server database management system, which allows attackers to cause service interruptions.

Vulnerability of the Server component: The Data Dictionary component of the MySQL Server database management system is vulnerable due to insufficient validation of input data. Exploitation of this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the TabGroups component in the Google Chrome web browser, related to memory usage after it is released, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TabGroups component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

The vulnerability of the Convert.c component in the Pillow image processing library, related to buffer overflow in memory, allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Convert.c component in the Pillow image processing library relates to the ability to pass parameters directly to the function. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failur...

What Happened to Facebook, Instagram, & WhatsApp?

Facebook and its sister properties Instagram and WhatsApp are suffering from ongoing, global outages. We dont yet know why this happened, but the how is clear: Earlier this morning, something inside Facebook caused the company to revoke key digital records that tell computers and other...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by presenting a long description of the problem or...

The vulnerability of the Redis database management system, related to buffer overflows in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Redis database management system is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures using the STRALGO LCS command...

The vulnerability of the `ecma_ref_ecma_string` function in the `ecma-helpers-string.c` component of the JavaScript engine for Internet of Things technology, JerryScript, and the IoT.js platform, relates to memory management after its release. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ecmarefecmastring function in the ecma-helpers-string.c component of the JavaScript framework for Internet of Things applications, JerryScript, and the IoT.js platform, is related to the use of memory after it is released. Exploiting this vulnerability could allow an...

CVE-2021-37698

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do not verify the server's certificate...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the spice-client remote access software, related to integer overflow, allows a hacker to gain access to confidential information or cause service failures.

The vulnerability of the spice-client remote access software is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to gain access to confidential information or cause service failures...

The vulnerability of the library for EXIF file grammar analysis in libexif, related to uncontrolled resource consumption, allows a violator to cause a service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the video component in the Simple DirectMedia Layer multimedia library, specifically the SDL_blit_copy.c file, is related to a potential overflow of integers. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the video component in the Simple DirectMediaLayer multimedia library’s SDLblitcopy.c file is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service...

CVE-2021-32743

Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions prior to 2.11.10 and from version 2.12.0 through version 2.12.4, some of the Icinga 2 features that require credentials for extern...

The vulnerability of the Pacemaker resource management software, related to lack of access control, allows a intruder to gain access to confidential information or cause service failures.

The vulnerability of the Pacemaker resource management software is related to improper access control. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

The vulnerability of the files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc, which are used for installing, updating, and removing software packages in the Apt suite, relates to integer overflow vulnerabilities. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc files, which are used for installing, updating, and removing software packages, is related to the lack of data cleaning. Exploiting this vulnerability can allow an attacker to access...

The vulnerability of the pdo_firebase module in the PHP programming language allows attackers to cause service failures.

The vulnerability of the pdofirebase module in the PHP programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mysql-wsrep component of the MariaDB database lies in errors during the processing of input data during syntax analysis. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mysql-wsrep component of the MariaDB database is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the graphical input settings in the fly-admin-dm system, due to lack of access control mechanisms, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the graphical input settings in the fly-admin-dm system is related to deficiencies in access control when changing the theme to “Fly Modern”. Exploiting this vulnerability allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service...

Ransomware. In the air?

Introduction As an exercise, we were asked to look at the potential vectors for ransomware to affect flight despatch and operations. In most cases, flight systems simply werent significantly exposed, but ground systems affected by ransomware may make flight ops either impossible or significantly...

The vulnerability of the res_pjsip_t38.c component in Asterisk IP-telephony management systems and Certified Asterisk allows a attacker to cause a service failure.

The vulnerability of the respjsipt38.c component in IP-telephony management systems like Asterisk and Certified Asterisk is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...