The vulnerability of the lookup_sequence function in the ZBar barcode reading library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the lookupsequence function in the ZBar barcode reading library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures using a...

The vulnerability of the CODEOWNERS component of the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.

The vulnerability of the CODEOWNERS component in the git-based software development platform for collaborative code management on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the packet-filtering filter in TC Flower software for multi-level switches like Open vSwitch (OvS) allows a hacker to cause a service failure.

The vulnerability of the packet-based flow control filter in TC Flower software multi-level switches like Open vSwitch OvS is related to deficiencies in handling exceptional states due to incorrect processing of packet metadata by Geneve. Exploiting this vulnerability can allow an attacker to cau...

The vulnerability of the XRef::fetch function (XRef.cc) in the PDF viewing software Xpdf, which allows a hacker to cause a service failure.

The vulnerability of the XRef::fetch function in the Xpdf PDF viewing software is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created PDF file...

The vulnerability of the {conn,adv}_{min,max}_interval_set() function in the implementation of the HCI driver for Bluetooth in Linux operating systems allows a attacker to compromise the integrity of protected information and cause service failure.

The vulnerability of the conn,advmin,maxintervalset function in the implementation of the HCI driver for Bluetooth in Linux operating systems is related to competitive access to resources race conditions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Vulnerability in the functions sniff_{min,max}_interval_set(), implemented in the HCI driver of the Bluetooth kernel of the Linux operating system, which allows a attacker to compromise the integrity of protected information and cause service failure.

The vulnerability of the Linux kernel Bluetooth HCI driver implementation relates to competitive access to resources during the execution of the sniffmin,maxintervalset function in the net/bluetooth/hcidebugfs.c module. Exploiting this vulnerability allows a remote attacker to compromise the...

The vulnerability of the ff_hevc_put_weighted_pred_avg_8_sse() function in the h.265 Libde265 implementation allows a hacker to cause a service failure.

The vulnerability of the ffhevcputweightedpredavg8sse function in the h.265 Libde265 implementation is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures through the use of a...

The vulnerability of the ip6_dst_gc() function (net/ipv6/route.c) in the Linux kernel’s IPv6 implementation allows a attacker to cause a service failure.

The vulnerability of the ip6dstgc function net/ipv6/route.c in the Linux kernel’s IPv6 implementation is related to incorrect handling of boundary conditions. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to pointer dereferencing errors, which allow attackers to trigger a service failure.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s replication mechanism allows a hacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, or delete data, or to cause service interruptions...

The vulnerability of component BOM in the macOS operating system allows a hacker to disclose sensitive information or cause a service failure.

The vulnerability of component BOM in the macOS operating system is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the HiredisAllocFns component in the /opt/fs/redisraft/deps/hiredis/alloc.c file of the Redis server management module RedisRaft allows a attacker to cause a service failure or exert other effects.

The vulnerability of the HiredisAllocFns component in the /opt/fs/redisraft/deps/hiredis/alloc.c file of the Redis server management module RedisRaft is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the web interface of the E-DDC3.3 automation station’s microprogramming software, related to uncontrolled resource consumption, allows a intruder to cause a service failure.

The vulnerability of the E-DDC3.3 automation station’s software web interface is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

How to Prepare for a Cyberattack

Deciphering the Cyber Invasion Terrain We exist in an era deeply entrenched in digital dependence, where cyber invasions present significant risks for companies, government establishments, and solitary users. As we hurdle deeper into the digital era, the art of cyber misdemeanors continues to...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted reques...

The vulnerability of the NetRandomInitSeed() function in the Tianocore edk2 library, which allows a hacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the NetRandomInitSeed function in the Tianocore edk2 library is related to errors in the code of the pseudo-random number generator when processing the Seed parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or...

The vulnerability of the Ip6IsOptionValid() function in the Tianocore edk2 library, which allows a attacker to compromise the accessibility of protected information or cause service failures.

The vulnerability of the Ip6IsOptionValid function in the Tianocore edk2 library is related to the execution of a loop with an unreachable exit condition when processing the PadN parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of protected...

The vulnerability of the Visual Analyzer (Snappy) component of the Oracle Business Intelligence Enterprise Edition software platform, which allows a hacker to trigger a service failure.

The vulnerability of the Visual Analyzer Snappy component of the Oracle Business Intelligence Enterprise Edition software platform is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...