The vulnerability of the Layer 2 Address Learning Daemon (L2ALD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the net/textproto package in the Golang programming language, which allows a hacker to trigger a service failure.

The vulnerability of the Golang net/textproto package is related to the large amount of memory allocated during the analysis of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the Juniper Tunnel Driver (JTD) and the ICMP module of Juniper Networks’ Junos OS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Juniper Tunnel Driver JTD and the ICMP module of Juniper Networks’ Junos OS Evolved operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted...

The vulnerability of the ProcAppleDRICreatePixmap() function in the X Window System Xorg-server allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ProcAppleDRICreatePixmap function in the X Window System Xorg-server lies in the possibility of data being written outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause servi...

The vulnerability of the Java framework for securing industrial applications using Spring Security lies in the incomplete cleanup of temporary or auxiliary resources. This allows attackers to access confidential data or cause service failures.

The vulnerability of the Java framework for securing industrial applications using Spring Security is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data or cause service failure...

The vulnerability of the TP-Link Device Debug protocol implementation in the microprogramming software for wireless access points Tp-Link AC1350 and Tp-Link N300 allows a hacker to cause service failure.

The vulnerability of the TP-Link Device Debug protocol implemented in the microsoftware for wireless access points Tp-Link AC1350 and Tp-Link N300 is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow a malicious actor to cause service failures by sendin...

OpenJDK: long Exception message leading to crash (8319851)

A flaw was found in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalV...

CVE-2024-21119

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

OpenJDK: long Exception message leading to crash (8319851)

A flaw was found in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalV...

PT-2024-4349 · Oracle +1 · Oracle Graalvm For Jdk +2

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to a vulnerability in the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM...

The vulnerability in the implementation of the RPC (Remote Procedure Call) protocol of Siemens’ process control systems such as SIMATIC PCS 7, OpenPCS 7, and Siemens’ SCADA system SIMATIC WinCC allows a attacker to trigger maintenance failures.

The vulnerability of the RPC Remote Procedure Call protocol implementation in Siemens SIMATIC PCS 7, OpenPCS 7, and SCADA systems like SIMATIC WinCC is related to errors in pointer assignment. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability in the `gui/util/qktxhandler.cpp` component of the KTX image processing module of the cross-platform framework for developing Qt software allows a hacker to cause a service failure.

The vulnerability in the gui/util/qktxhandler.cpp component of the KTX image processing module for the cross-platform development framework for Qt software development relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious act...

OESA-2024-1360 telnet security update

Telnet is an application protocol used on the Internet or local area network to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection. The package includes a remote login client program for telnet and a server daemon. Security Fixes: telnetd ...

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices are related to insufficient input data validation, allowing attackers to trigger service interruptions.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an...

The software for remote control of computers by TeamViewer on macOS has vulnerabilities related to error handling of links, which allows attackers to escalate their privileges or cause service failures.

The vulnerability of TeamViewer’s remote control software for macOS is related to errors in URL processing. Exploiting this vulnerability can allow attackers to gain increased privileges or cause service interruptions...

The vulnerability in the file src/gif.imageio/gifinput.cpp of the OpenImageIO image processing library allows a attacker to cause a service failure.

The vulnerability in the src/gif.imageio/gifinput.cpp file of the OpenImageIO library relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Navigating SQL Injection Vulnerabilities with DAST for Modern AppSec

The digital landscape is continuously evolving, and with it, the strategies for safeguarding our applications against vulnerabilities. In a recent advisory, CISA & the FBI have highlighted the critical importance of conducting thorough reviews of code and supply chains. The aim is to unearth any...

The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean arises from insufficient verification of the communication channel source. This vulnerability allows attackers to trigger service failures.

The vulnerability of microprogrammed communication module software for SIMATIC CP 343-1, SIMATIC CP 343-1 Lean, SIPLUS NET CP 343-1, and SIPLUS NET CP 343-1 Lean is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the proxy server of the cloud messaging and Apache Pulsar streaming platform allows attackers to expose sensitive information and cause service failures.

The vulnerability of a cloud messaging and Apache Pulsar streaming service’s proxy server lies in the lack of authentication checks for a critical function. Exploiting this vulnerability allows an attacker to disclose protected information and cause service failures...