Rockwell Automation E3 Plus (84-420A) 193/592-EC2J Motor Overload

Binary data 752301.prm...

Rockwell Automation E3 EC3 (0.4-2A) 193/592-EC3P Motor Overload

Binary data 752313.prm...

Rockwell Automation 825-PDN via 2100-ENET Motor Overload

Binary data 752366.prm...

Rockwell Automation E3 EC3 (1...5A) via 2100-ENET Motor Overload

Binary data 752345.prm...

Rockwell Automation E3 (5...25A) via 2100-ENET Motor Overload

Binary data 752336.prm...

Rockwell Automation E3 EC4 (9...5000A) via 2100-ENET Motor Overload

Binary data 752358.prm...

Rockwell Automation E3 EC4 (9-5000A) 193/592-EC4Z Motor Overload

Binary data 752321.prm...

Specher+Schuh C3 (1-5A) C3-EC3A Motor Overload

Binary data 754822.prm...

Rockwell Automation E3 EC4 (1...5A) via 2100-ENET Motor Overload

Binary data 752352.prm...

libparsec-mac-qt5 DoS

The vulnerability of the libparsec-mac-qt5 library for developing graphical applications using Qt 5 graphical interfaces on the Astra Linux operating system is related to a flaw that causes excessive load when there are a large number of domain users. Exploiting this vulnerability may allow a...

Nextcloud: Uploading large avatar images cause excessive CPU usage

How to reproduce: - Create an account on any server running Nextcloud 13 or 14. - Open the personal settings. - Upload a large image as avatar tested with a 4032x3024 PNG image of about 14.5 MB. - Keep the selected area in the popup and save the avatar. - Notice that the avatar area shows the...

CVE-2018-20164

An issue was discovered in regex.yaml aka regexes.yaml in UA-Parser UAP-Core before 0.6.0. A Regular Expression Denial of Service ReDoS issue allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to a value containing a long digit string. The UAP-Core...

Denial Of Service (DoS)

OpenSSL is vulnerable to Denial Of Service DoS. A malicious user can send multiple large OCSP Status Request extension to the server. causing it to run out of memory and crash...

libparsec-common-qt5 Confidential Data DoS

The vulnerability of the libparsec-common-qt5 package in the Astra Linux operating system is related to an error in the interaction with LDAP through parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a remote attacker to gain access to information about a...

nginx: Excessive CPU usage via flaw in HTTP/2 implementation

nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngxhttpv2module not compiled by default if the 'http2' option of the 'listen' directive is used in a configuration file...

GHSA-X5X7-3V85-WPC4 Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used

In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. NOTE: this...

A Hybrid Solution to Taming SOC Alert Overload

The moving assembly line was one of the greatest innovations of the Industrial Revolution. Prior to 1913, when Henry Ford installed the first moving assembly line in his factory, cars were built by humans performing manual, mundane tasks. Imagine humans hand painting cars on the factory floor –...

Monero: Malicious get_random_rct_outs.bin rpc can cause a near-infinite loop

Summary: An unsanitized getrandomrctouts.bin rpc request can cause the rpc handler to go into an effectively infinite-loop, peg the cpu, and block other requests from completing. Description: The rpc endpoint /getrandomrctouts.bin takes a uint64 outscount as input and will return that many random...

How To Leverage Data Access Analytics for Effective Breach Detection

Detecting and preventing data breaches is a challenge for most, if not all, enterprises. In fact, according to a study released in 2017, 78% of all CISOs are concerned that data breaches go undetected, while only 19% admit they are effective at breach prevention. Simply put, breaches happen almos...

CVE-2017-7651

In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authentications if occur in connection phase of MQTT protocol...