The vulnerability of the fly-weather software package for the Astra Linux operating system, related to a validation error in the input data received from web servers, allows attackers to trigger a service failure.

The vulnerability of the fly-weather software package for the Astra Linux operating system is related to a validation error in the input data received from the web server. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

CVE-2018-16386

An issue was discovered in SWIFT Alliance Web Platform 7.1.23. A log injection and an arbitrary log filename can be achieved via the PATHINFO to swp/login/EJBRemoteService/, related to com.swift.ejbgwt.j2ee.client.EjBlnvocationException error log information containing null@java:comp/env/ error...

Hawtio 2.5.0 Server Side Request Forgery

CipherTechs Inc - Security Advisory Hawtio Server-Side Request Forgery Introduction ============ Hawtio https://hawt.io/ is a modular web console for managing Java. CipherTechs discovered that Hawtio up to and including version 2.5.0 is vulnerable to unauthenticated Server-Side Request Forgery...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility, related to resource release errors, allows a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.

Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks are related to request processing errors. Exploiting these vulnerabilities allows attackers to remotely cause service failures by sending specially crafted requests...

The vulnerability of the Locally Significant Certificate (LSC) management mechanism in Cisco Wireless LAN Controller (WLC) software allows a attacker to cause a service failure.

The vulnerability of the Locally Significant Certificate LSC management mechanism in Cisco Wireless LAN Controllers WLC is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the roaming_read and roaming_write functions in the OpenSSH cryptographic security tool allows a hacker to induce a service failure.

The vulnerability of the roamingread and roamingwrite functions in the OpenSSH cryptographic protection mechanism arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability allows a malicious actor to cause a service failure from a remote location...

Vulnerability of .NET Core and Microsoft .NET Framework software platforms, related to errors in regular expression processing, allowing attackers to trigger service failures.

The vulnerability of.NET Core and Microsoft.NET Framework software lies in errors that occur during the processing of regular expressions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the MDC2_Update function in the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability of the MDC2Update function crypto/mdc2/mdc2dgst.c in the OpenSSL library is due to a numerical overflow condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

ALPINE-CVE-2019-5953

Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service DoS or may execute an arbitrary code via unspecified vectors...

Malicious Package

Overview The package donotinstallthis contained malicious code. The package contained a script that was run as part of the install script. The script contacted a remote service tracking how many installations were done. There is no further compromise. Recommendation Remove the package from your...

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the JSON-lib library used in REST plugins of the Apache Struts software framework allows attackers to induce a service failure.

The vulnerability of the JSON-Lib library used in Apache Struts’ REST framework programming platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the virJSONValueObjectHasKey function in the Libvirt management library allows a attacker to trigger a service failure.

The vulnerability of the virJSONValueObjectHasKey function in the Libvirt virtualization management library arises from the assignment of a null pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the implementation of the ResourceHttpRequestHandler class in the Spring Framework’s software platform allows a perpetrator to trigger a service failure.

The vulnerability of the ResourceHttpRequestHandler implementation in the Spring Framework’s software platform is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the XML API software interface of the Cisco TelePresence Video Communication Server and the Cisco Expressway gateway software allows a perpetrator to induce a service failure.

The vulnerability of the XML API software interface of Cisco TelePresence Video Communication Server and the Cisco Expressway gateway software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Vulnerability of the Server component: The Replication module of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Replication component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...