Apache Pinot Denial of Service Vulnerability

Apache Pinot is a real-time distributed OLAP data store from the Apache Foundation, Inc. Designed to provide ultra-low latency analysis, Apache Pinot 0.9.3 and earlier versions contain a denial-of-service vulnerability that could be exploited by an attacker to cause a Pinot service outage via a...

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Suricata intrusion detection and prevention system, due to deficiencies in access control, allows an intruder to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions...

Vulnerability of the Server component: Security: Encryption of the MySQL Server database management system, which allows attackers to cause partial service interruptions.

The vulnerability of the MySQL Server component’s Security: Encryption module is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause a partial service outage...

The vulnerability of Xen hypervisors, related to the use of memory after it is freed, allows a attacker to cause a service failure or increase their privileges.

The vulnerability of Xen hypervisors relates to the use of memory after it is freed during the processing of input/output page tables in the IOMMU Input/Output Memory Management Unit memory management unit. Exploiting this vulnerability can allow an attacker to cause service failures or increase...

OpenJDK: Excessive memory allocation in TIFF*Decompressor (ImageIO, 8274096)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

Prosodical Thoughts Prosody安全漏洞

Prosodical Thoughts Prosody is a Prosodical Thoughts open source application . A modern XMPP communication server. A security vulnerability exists in Prosodical Thoughts Prosody due to improper validation of untrusted XML data. A remote attacker could send specially crafted data to the affected...

CVE-2021-44160

Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire another general user’s privilege by modifying the cookie parameter without authentication. The attacker can then perform limited operations on the system or modify data, making the...

The vulnerability of the BFCache component in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the BFCache component in Microsoft Edge and Google Chrome is related to overflow errors in dynamic memory buffers. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions...

Kronos crippled by ransomware, service may be out for weeks

Human resources platform provider UKG has put out a statement saying its fallen prey to ransomware that has disrupted the Kronos Private Cloud. It expects the service to be out for several weeks. The statement came after the company posted a message on the Kronos community message board, explaini...

Bandwidth.com reports multimillion dollar loss post DDoS attacks

By Waqas In September 2021, Bandwidth.com suffered a series of days-long DDoS attacks forcing its service to go offline in the United States. This is a post from HackRead.com Read the original post: Bandwidth.com reports multimillion dollar loss post DDoS attacks...

The vulnerability of the Google Chrome web browser’s Extensions relates to the use of memory after it is released. This allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s browser Extensions relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created HTML page...

OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker...

The vulnerability of the Analytics service in the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, allows a attacker to trigger a service failure.

The vulnerability of the Analytics service in the management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2021-2438

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM...

The vulnerability of the ImfDwaCompressor.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels. This vulnerability stems from reading data beyond the allowable buffer size, allowing attackers to cause system failures.

The vulnerability of the ImfDwaCompressor.cpp library, a software component for image storage with wide dynamic range brightness in OpenEXR format, lies in the execution of operations that exceed the allowable buffer data size limits. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the Trend Micro Home Network Security anti-virus protection, related to resource release errors, allows a perpetrator to trigger a service failure.

The vulnerability of the Trend Micro Home Network Security antivirus protection lies in resource release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2021-29693

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon. IBM X-Force ID: 200255...

Akamai Provides Prolexic DDoS Service Impact Update (Status: Resolved)

Akamai experienced an outage for one of its Prolexic DDoS services Routed 3.0 starting at 4:20 AM UTC. We detected the issue immediately, and impacted customers received an error alert within seconds. The impact was limited to Akamai customers using version 3.0 of the Routed service. Many of the...