The vulnerability of the microprogramming software of Huawei CV81-WDM FW devices, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the microprogramming software in Huawei CV81-WDM FW multifunctional devices is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially created malware package...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to cause service failures or unexpected shutdowns.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or forced shutdowns through network packets...

The vulnerability of the CGI interpreter component for the PHP programming language allows attackers to disclose protected information, compromise data integrity, or cause service failures.

The vulnerability of the cgi component sapi/cgi/cgimain.c in the PHP programming language is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information, compromise data integrity, or cause service failures...

The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P router software allows a hacker to cause service interruptions.

The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P microprogrammed software routers lies in the absence of restrictions on file loading. Exploiting this vulnerability can allow a malicious actor to cause service failures by loading arbitrary files onto...

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to improper authentication. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

Targeting Satellite? CISA, FBI Warns of Attacks on SATCOM Network Providers

By Deeba Ahmed This advisory comes amid an investigation spearheaded by investigation teams from the US and Europe regarding service outages… This is a post from HackRead.com Read the original post: Targeting Satellite? CISA, FBI Warns of Attacks on SATCOM Network Providers...

The vulnerability of the SwapCreateRegister function in the implementation of the X Window System X.Org Server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SwapCreateRegister function in the X Window System X.Org Server implementation is related to the execution of operations that go beyond the permissible data buffer limits. Exploiting this vulnerability can allow attackers to access confidential data, compromise its...

The vulnerability of the `ntfs_runlists_merge_i` function in the NTFS file system driver for the FUSE NTFS-3G module arises from the reading beyond the buffer’s allowed limits. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsrunlistsmergei function in the NTFS file system driver for the FUSE NTFS-3G module relates to reading data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause servi...

The vulnerability of WebKitGTK and WPE WebKit rendering modules, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

The vulnerability of the dnsc_load_local_data function in the DNS server Unbound allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dnscloadlocaldata function in the Unbound DNS server is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Local Security Architecture (LSA) of the Microsoft Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Microsoft Windows operating system’s Local Security Account LSA is related to insufficient input validation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The Data Dictionary of the MySQL Server database management system, which allows attackers to cause service interruptions.

Vulnerability of the Server component: The Data Dictionary component of the MySQL Server database management system is vulnerable due to insufficient validation of input data. Exploitation of this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the TabGroups component in the Google Chrome web browser, related to memory usage after it is released, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TabGroups component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

The vulnerability of the Convert.c component in the Pillow image processing library, related to buffer overflow in memory, allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Convert.c component in the Pillow image processing library relates to the ability to pass parameters directly to the function. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failur...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by presenting a long description of the problem or...

The vulnerability of the `ecma_ref_ecma_string` function in the `ecma-helpers-string.c` component of the JavaScript engine for Internet of Things technology, JerryScript, and the IoT.js platform, relates to memory management after its release. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ecmarefecmastring function in the ecma-helpers-string.c component of the JavaScript framework for Internet of Things applications, JerryScript, and the IoT.js platform, is related to the use of memory after it is released. Exploiting this vulnerability could allow an...

The vulnerability of the Redis database management system, related to buffer overflows in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Redis database management system is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures using the STRALGO LCS command...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the spice-client remote access software, related to integer overflow, allows a hacker to gain access to confidential information or cause service failures.

The vulnerability of the spice-client remote access software is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to gain access to confidential information or cause service failures...

The vulnerability of the library for EXIF file grammar analysis in libexif, related to uncontrolled resource consumption, allows a violator to cause a service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...