The vulnerability of the Yaws CGI web server lies in the lack of measures to neutralize special elements, which allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Yaws CGI web server implementation is related to improper cleaning of CGI requests. Exploiting this vulnerability can allow an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mismatches. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

The vulnerability of the 3D rendering software SwiftShader in the Google Chrome browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the 3D rendering software SwiftShader in the Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Google Chrome browser’s media component allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome browser’s media component is related to insufficient data validation. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...

The vulnerability of the shell autocompletion function in the UNIX command shell Zsh allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shell autocompletion function in the UNIX command shell Zsh is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the Wireshark network traffic analyzer and CMS device allows a hacker to cause a service failure.

The vulnerability of the Wireshark network traffic analyzer’s CMS is related to the lack of initialization of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of VNC implementations with extensions for optimizing operations under slow data transmission channels, such as Tightvnc, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of VNC implementations with extensions for optimizing operations under slow data transmission channels, such as Tightvnc, is related to the execution of operations within the allowable buffer size limits. Exploiting this vulnerability can allow a remote attacker to gain access t...

The vulnerability of the Active Directory Domain Controller (AD DC) in the Samba networking software package arises from a lack of privilege control mechanisms and access management tools. This vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Active Directory Domain Controller AD DC in the Samba networking software package is related to the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

The vulnerabilities of the mem_cache_store.rb and redis_cache_store.rb components of the Ruby on Rails software platform allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the memcachestore.rb and rediscachestore.rb components of the Ruby on Rails software framework is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component, which is part of the database management system, is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

The vulnerability of the C API component of the MySQL Database Management System client, which allows a hacker to trigger a service failure.

The vulnerability of the C API component of the MySQL Database Management System client is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

CVE-2021-3166

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3805 devices. An attacker can upload arbitrary file content as a firmware update when the filename SettingsDSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it were a real update,...

CVE-2021-3166

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3805 devices. An attacker can upload arbitrary file content as a firmware update when the filename SettingsDSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it were a real update,...

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird is related to reading data from memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Visualize Visitor Prioritization in Real Time with mPulse

The internet has become one of the most important access points in our daily lives. Unexpected surges in demand can slow web pages and create service outages for unprepared websites. A poor user experience leads to dissatisfied customers, making it more critical than ever to visualize and control...

The vulnerability of the Flexible NetFlow operating system in Cisco IOS XE network devices of the Cisco Catalyst 9800 Series allows a attacker to cause service interruptions.

The vulnerability of the Flexible NetFlow operating system and Cisco IOS XE network devices from the Cisco Catalyst 9800 series is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Microsoft SQL Server Management Studio database management system arises from insufficient validation of input data. This allows attackers to trigger a service failure.

The vulnerability of Microsoft SQL Server Management Studio exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the LDAP server of the Samba networking software, which is configured as an Active Directory domain controller, allows a hacker to cause a service failure.

The vulnerability of the LDAP server of the Samba networking software, which is configured as an Active Directory domain controller, relates to a buffer overflow vulnerability. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of reverse proxies and proxy redirection mechanisms in the Apache Traffic Server, related to the operation exceeding the allowed buffer data limits, allows attackers to cause service failures.

The vulnerability of reverse proxies and proxy redirection in the Apache Traffic Server is related to the operation exceeding the allowable buffer data limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Transfer-Encoding and Content-length headers in reverse proxy and proxy redirection mechanisms of the Apache Traffic Server allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Transfer-Encoding and Content-length headers in reverse proxy and proxy redirection mechanisms of the Apache Traffic Server is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data,...