Vulnerability of the Server component: The Oracle MySQL Server database management system’s Parser component, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the ntdll function! The RtlRaiseStatus function in the WebAccess HMI Designer software development and management tool allows a hacker to cause a service failure.

The vulnerability of the ntdll!RtlRaiseStatus0x00000000000000b function in the WebAccess HMI Designer software for developing and managing HMI applications is related to deficiencies in handling exceptional states. Exploiting this vulnerability could allow an attacker to cause service failures...

Vulnerability of the MSVCR90!memcpy function in the WebAccess HMI Designer software for developing and managing HMI applications. This vulnerability allows attackers to cause system failures.

The vulnerability of the MSVCR90!memcpy function 0x000000000000015c in the WebAccess HMI Designer software for developing and managing HMI applications is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the Secure Copy function in Cisco Adaptive Security Appliance (ASA) microprogramming software allows a perpetrator to trigger a service failure.

The vulnerability of the Secure Copy function in Cisco Adaptive Security Appliance ASA microprogramming software is related to type determination errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The numerous vulnerabilities of Check Point Security Gateway’s security gateway, related to resource release errors, allow attackers to trigger service failures.

The multiple vulnerabilities of Check Point Security Gateway are related to resource release errors. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures remotely...

The vulnerability of the Array.pop method in Thunderbird email clients and Firefox and Firefox ESR browsers allows a hacker to trigger a service failure.

The vulnerability of the Array.pop method in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the lack of type checking when passing objects around. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Podman / Varlink Remote Code Execution

!/usr/bin/python -- coding: UTF-8 -- pickletime.py Podman + Varlink Insecure Config Remote Exploit Jeremy Brown jbrown3264/gmail @ Oct 2019 ------- Details ------- Podman is container engine / platform similar to Docker supported by RedHat and Fedora with Varlink being a protocol to exchange...

The vulnerability of the SIP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failure.

The vulnerability of the SIP protocol implementation in Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense FTD is related to errors in processing SIP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the input packet processing function in the Cisco IOS operating system allows a hacker to trigger a service failure.

The vulnerability of the input processing function in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Raw Socket Transport function in the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s Raw Socket Transport function exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, allows attackers to trigger a service failure.

The vulnerability of the Skia library used by Firefox and Firefox ESR browsers, as well as the Thunderbird email client, is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-ald-se component in the FLY operating system environment of Astra Linux is related to incorrect configuration of security contexts when adding/removing users who are part of the administrator group. Exploiting this vulnerability allows a malicious actor to cause...

The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-digsig component in the FLY operating system environment of Astra Linux is related to errors that cause significant time delays when opening a folder with the ELF filter enabled. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux is related to an error that causes a significant delay in opening a folder with the ELF filter enabled. Exploiting this vulnerability allows a remote attacker to cause a service failure...

CVE-2019-9420

In libhevc, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111272481...

The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system, which allows a intruder to trigger a service failure.

The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system is related to errors in processing TCP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability of the sub-component “Pluggable Auth” of the MySQL Server component of the Oracle MySQL database management system: This feature allows attackers to cause a service failure.

Vulnerability of the Server sub-component: The Pluggable Auth component of the MySQL Server of the Oracle MySQL database management system is related to improper access control. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...

The vulnerability in the virtual remote connection service for microprogramming control devices of the BMC Supermicro family allows a hacker to gain full control over the device.

The vulnerability of the virtual remote connection service for Microprogramming Software Control Devices of Supermicro is due to insufficient security restrictions for critical management functions. Exploiting this vulnerability allows a malicious actor to gain full control over the device by...

The vulnerability of the NX-API network operating system in Cisco NX-OS routers allows a attacker to induce a service failure.

The vulnerability of the NX-API network operating system in Cisco NX-OS routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...