295 matches found
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to cause partial service failure.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a partial service outage...
CVE-2019-2764
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...
Race condition
A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, Cisco TelePresence Video Communication Server VCS, and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users...
Salesforce Woes Linger as Admins Clean Up After Service Outage
After a massive service outage on Friday, software-as-a-service giant Salesforce restored partial access to its affected customers over the weekend, while admins continued with cleanup into Monday. The outage was brought on by a scripting error that affected all Pardot marketing automation softwa...
Vulnerability of the Server: Optimizer component of the Oracle MySQL database management system, which allows attackers to cause service interruptions.
The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
Facebook and Instagram are down around the world
By Carolina Facebook says it's aware of the situation and trying to fix the issue. Another day, another service outage at social media giant Facebook and its subsidiary company Instagram. Yes, Facebook and Instagram have been hit by a worldwide service outage forcing both platforms to go offline...
The vulnerability of the atol8 function in the libarchive library, which allows a hacker to cause a service failure
The vulnerability of the atol8 function archivereadsupportformatxar.c in the libarchive library is related to errors in processing empty strings, which can lead to buffer overflows. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Client programs component of the Oracle MySQL Server database management system allows a attacker to cause a service failure.
The vulnerability of the Client programs in the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions...
CVE-2019-2456
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
ThreatList: $1.7M is the Average Cost of a Cyber-Attack
The average cost estimate for cleaning up a cyberattack comes in at around $1.1 million, according to a recent survey. But this is actually a rosy view: For those organizations that actually calculate versus estimate the real cost of an attack, that number increases significantly to $1.67 million...
DEBIAN-CVE-2018-10851
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service...
Microsoft Skype for Business and Lync Denial of Service Vulnerability
Microsoft Office is a suite of office software products.Skype for Business is one of the integrated communication platforms for businesses. A denial of service vulnerability exists in Microsoft Skype for Business and Lync. An attacker could exploit this vulnerability to cause the target service t...
CVE-2018-3264
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...
CVE-2018-2888
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J...
UBUNTU-CVE-2018-2799
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network...
Equifax Reopens Salary Lookup Service
Equifax has re-opened a Web site that lets anyone look up the salary history of a large portion of the American workforce using little more than a person's Social Security number and their date of birth. The big-three credit bureau took the site down just hours after I wrote about it on Oct. 8, a...
The vulnerability of the ReadPSDImage function (coders/psd.c) in the ImageMagick console graphics editor allows a hacker to cause a service failure.
The vulnerability of the ReadPSDImage function coders/psd.c in the console-based image editing tool ImageMagick is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
The vulnerability of Xen hypervisors allows a perpetrator to obtain confidential information or cause service failures.
The vulnerability of Xen hypervisors is related to insufficient checking of the ports accessed by the attackers. Exploiting this vulnerability can allow a remote attacker to cause service failures or obtain confidential information such as changing the zero pointer...
Man Accidentally Destroyed Production Database on First Day of His Job
By Waqas We all make mistakes, but some mistakes are fatal ending up with devastating consequences just like one of those Amazon engineers whos typo error caused a major service outage worldwide. But then theres this man /cscareerthrowaway567 who recently posted on Reddit explaining that he...
Code injection
Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service E2 service outage via unspecified vectors...