The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient input data validation, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to errors in access management, allows a perpetrator to trigger a service failure.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to errors in access management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Zoom’s video conferencing software, related to deficiencies in authentication procedures, allows attackers to disclose protected information or cause service failures.

The vulnerability of Zoom’s video conferencing software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

The vulnerability of the Wireshark traffic analyzer, caused by uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Wireshark traffic analyzer is caused by an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

The vulnerability of the microprogrammed software of the ROC800 series controllers, related to the ability to bypass authentication due to a fundamental flaw, allows attackers to gain unauthorized access to protected information and cause service failures.

The vulnerability of the microprogramming software of the ROC800 series controllers is related to the ability to bypass authentication due to a fundamental flaw. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and cause...

The vulnerability of Vim text editors, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Vim text editor is related to integer overflow. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the InsightHome and InsightFacility energy consumption management systems, related to insufficient validation of input data, allows a perpetrator to execute arbitrary codes.

The vulnerability of the InsightHome and InsightFacility energy consumption management systems is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of NoSQL Redis database management systems, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NoSQL Redis database management system is related to a numerical overflow when changing the proto-max-bulk-len configuration parameter to a high value. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and caus...

The vulnerability of the `answer_request` function in the `fuzz_rfc1035.c` component of the DNS server Dnsmasq allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the answerrequest function in the fuzzrfc1035.c component of the DNS server Dnsmasq is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the MagickCore/property.c component of the console-based image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MagickCore/property.c component in the console-based image editing tool ImageMagick is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the implementation of the SCTP (Stream Control Transmission Protocol) kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCTP Stream Control Transmission Protocol implementation in the Linux operating system relates to the situation where a user launches a malicious network service, and someone else connects to that service. This can lead to a shortage of resources for local users. Exploiti...

Ransomware led to multiple DISH Network outages

Satellite broadcast organisation DISH experienced a major system issue over the past week which affected multiple services. Websites and channels were unavailable, logins were non-functional, and some folks couldnt even pay their bills as a result of the downtime. There was a suspicion that...

KillNet hits healthcare sector with DDoS attacks

At the end of January, the Health Sector Cybersecurity Coordination Center warned that the KillNet group is actively targeting the US healthcare sector with distributed denial-of-service DDoS attacks. The Cybersecurity and Infrastructure Security Agency CISA says it helped dozens of hospitals...

The vulnerability of the Broadcom Full MAC Wi-Fi driver (drivers/net/wireless/broadcom/brcm80211/brcmfmac) in Linux operating systems allows a hacker to increase their privileges or cause service failures.

The vulnerability of the Broadcom Full MAC Wi-Fi driver drivers/net/wireless/broadcom/brcm80211/brcmfmac in Linux operating systems is caused by buffer overflows. Exploiting this vulnerability can allow attackers to gain increased privileges or cause service interruptions...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the HTTP(S) control module for operating systems HiOS with Belden Hirschmann network switches of the RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, and RED series, as well as the operating system HiSecOS with Belden Hirschmann network switches of the EAGLE20/30 series, allows a perpetrator to cause service interruptions.

The vulnerability of the HTTPS control module for operating systems HiOS and network switches from Belden Hirschmann, models RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, as well as the operating system HiSecOS for network switches from Belden Hirschmann, model EAGLE20/30, is related to th...

The vulnerability of the `cv::RBaseStream::readBlock` function in the `modules/imgcodecs/src/bitstrm.cpp` file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the cv::RBaseStream::readBlock function in the modules/imgcodecs/src/bitstrm.cpp file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to reading data beyond the allowed buffer limits. Exploiting this...

The vulnerability of the spell_iswordp() function in the spell.c component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the spelliswordp function in the spell.c component of the Vim text editor is related to the lack of checks for empty prewords. Exploiting this vulnerability allows a malicious user to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability in the regexp_nfa.c component of the Vim text editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the regexpnfa.c component in the text editor Vim is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s Optimizer component allows a hacker to cause service failures or gain access to read, modify, or delete data.

The vulnerability of the Oracle MySQL Server component of the database management system’s Optimizer is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures or gain read, modify, or delete privileges using the MySQL protocol...